CVE-2007-1349

Опубликовано: 30 мар. 2007

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
Broken Link
http://rhn.redhat.com/errata/RHSA-2007-0395.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2008-0630.html
Third Party Advisory
http://secunia.com/advisories/24678
Third Party Advisory
http://secunia.com/advisories/24839
Third Party Advisory
http://secunia.com/advisories/25072
Third Party Advisory
http://secunia.com/advisories/25110
Third Party Advisory
http://secunia.com/advisories/25432
Third Party Advisory
http://secunia.com/advisories/25655
Third Party Advisory
http://secunia.com/advisories/25730
Third Party Advisory
http://secunia.com/advisories/25894
Third Party Advisory
http://secunia.com/advisories/26084
Third Party Advisory
http://secunia.com/advisories/26231
Third Party Advisory
http://secunia.com/advisories/26290
Third Party Advisory
http://secunia.com/advisories/31490
Third Party Advisory
http://secunia.com/advisories/31493
Third Party Advisory
http://secunia.com/advisories/33720
Third Party Advisory
http://secunia.com/advisories/33723
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200705-04.xml
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-248386-1
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:mod_perl:*:*:*:*:*:*:*:*

Версия до 1.30 (исключая)

cpe:2.3:a:apache:mod_perl:*:*:*:*:*:*:*:*

Версия от 2.0.0 (включая) до 2.0.11 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:redhat:satellite:5.1:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:4.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10289

Средний

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2007-1349

ubuntu

больше 18 лет назад

CVE-2007-1349

redhat

больше 18 лет назад

CVE-2007-1349

debian

больше 18 лет назад

PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mo ...

GHSA-fxxc-hq33-c3m6

github

больше 3 лет назад

ELSA-2007-0395

oracle-oval

около 18 лет назад

ELSA-2007-0395: Low: mod_perl security update (LOW)

EPSS

Процентиль: 93%

0.10289

Средний

5 Medium

CVSS2

Дефекты

CWE-20