MiracleLinux 7 : rh-perl524-mod_perl-2.0.9-10.el7 (AXSA:2019-3444:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3444:01 advisory. modperl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess CVE-2011-2767 Tenable has extracted the preceding...

SUSE CVE-2011-2767

modperl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because contrary to the documentation there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting...