Summary
Jan Ingvoldstad discovered that mod_perl incorrectly handled configuration
options to disable being used by unprivileged users, contrary to the
documentation. A local attacker could possibly use this issue to execute
arbitrary Perl code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libapache2-mod-perl2 | 2.0.8+httpd24-r1449661-6ubuntu2.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | libapache2-mod-perl2 | 2.0.9-4ubuntu1.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | libapache2-mod-perl2 | 2.0.10-2ubuntu3.18.04.1 |
Vulnerabilities 1
-
Unscored —
mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess fil…
References
-
report
https://ubuntu.com/security/CVE-2011-2767