National Cyber Awareness System

Vulnerability Summary for CVE-2007-1349

Overview

PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 23192

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/23192

External Source: XF

Name: modperl-pathinfo-dos(33312)

Hyperlink:http://xforce.iss.net/xforce/xfdb/33312

External Source: VUPEN

Name: ADV-2007-1150

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/1150

External Source: UBUNTU

Name: USN-488-1

Hyperlink:http://www.ubuntu.com/usn/usn-488-1

External Source: SECTRACK

Name: 1018259

Hyperlink:http://www.securitytracker.com/id?1018259

External Source: REDHAT

Name: RHSA-2008:0627

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0627.html

External Source: REDHAT

Name: RHSA-2008:0261

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0261.html

External Source: REDHAT

Name: RHSA-2007:0486

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0486.html

External Source: REDHAT

Name: RHSA-2007:0396

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0396.html

External Source: SUSE

Name: SUSE-SR:2007:008

Hyperlink:http://www.novell.com/linux/security/advisories/2007_8_sr.html

External Source: SUSE

Name: SUSE-SR:2007:012

Hyperlink:http://www.novell.com/linux/security/advisories/2007_12_sr.html

External Source: MANDRIVA

Name: MDKSA-2007:083

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:083

External Source: MISC

Name: http://www.gossamer-threads.com/lists/modperl/modperl/92739

Hyperlink:http://www.gossamer-threads.com/lists/modperl/modperl/92739

External Source: CONFIRM

Name: http://svn.apache.org/repos/asf/perl/modperl/branches/1.x/Changes

Hyperlink:http://svn.apache.org/repos/asf/perl/modperl/branches/1.x/Changes

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-293.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-293.htm

External Source: SUNALERT

Name: 1021508

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1

External Source: SUNALERT

Name: 248386

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-66-248386-1

External Source: GENTOO

Name: GLSA-200705-04

Hyperlink:http://security.gentoo.org/glsa/glsa-200705-04.xml

External Source: SECUNIA

Name: 33723

Type: Advisory

Hyperlink:http://secunia.com/advisories/33723

External Source: SECUNIA

Name: 33720

Type: Advisory

Hyperlink:http://secunia.com/advisories/33720

External Source: SECUNIA

Name: 31493

Type: Advisory

Hyperlink:http://secunia.com/advisories/31493

External Source: SECUNIA

Name: 31490

Type: Advisory

Hyperlink:http://secunia.com/advisories/31490

External Source: SECUNIA

Name: 26290

Type: Advisory

Hyperlink:http://secunia.com/advisories/26290

External Source: SECUNIA

Name: 26231

Type: Advisory

Hyperlink:http://secunia.com/advisories/26231

External Source: SECUNIA

Name: 26084

Type: Advisory

Hyperlink:http://secunia.com/advisories/26084

External Source: SECUNIA

Name: 25894

Type: Advisory

Hyperlink:http://secunia.com/advisories/25894

External Source: SECUNIA

Name: 25730

Type: Advisory

Hyperlink:http://secunia.com/advisories/25730

External Source: SECUNIA

Name: 25655

Type: Advisory

Hyperlink:http://secunia.com/advisories/25655

External Source: SECUNIA

Name: 25432

Type: Advisory

Hyperlink:http://secunia.com/advisories/25432

External Source: SECUNIA

Name: 25110

Type: Advisory

Hyperlink:http://secunia.com/advisories/25110

External Source: SECUNIA

Name: 25072

Type: Advisory

Hyperlink:http://secunia.com/advisories/25072

External Source: SECUNIA

Name: 24839

Type: Advisory

Hyperlink:http://secunia.com/advisories/24839

External Source: SECUNIA

Name: 24678

Type: Advisory

Hyperlink:http://secunia.com/advisories/24678

External Source: REDHAT

Name: RHSA-2008:0630

Hyperlink:http://rhn.redhat.com/errata/RHSA-2008-0630.html

External Source: REDHAT

Name: RHSA-2007:0395

Hyperlink:http://rhn.redhat.com/errata/RHSA-2007-0395.html

External Source: OVAL

Name: oval:org.mitre.oval:def:8349

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8349

External Source: OVAL

Name: oval:org.mitre.oval:def:10987

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10987

External Source: SGI

Name: 20070602-01-P

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc

References to Check Content

Identifier:oval:org.mitre.oval:def:10987

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10987

Identifier:oval:org.mitre.oval:def:8349

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:8349