URL regular expression DoS (CVE-2007-1349)
A flaw was discovered in the Apache::PerlRun module shipped with
mod_perl 1.29 and earlier and in the ModPerl::RegistryCooker module shipped with
mod_perl 2.03 and earlier. A remote attacker could craft a URL with a path that
would be interpreted as a regular expression, potentially allowing a
denial of service by creating an expression that will take a very long
time to run. This vulnerability only affects Apache::PerlRun and
custom subclasses of ModPerl::RegistryCooker that explicitly use the
namespace_from_uri() method. The Apache::Registry, ModPerl::PerlRun,
and ModPerl::Registry modules are NOT affected.
Users of mod_perl 1.29 and earlier are encouraged to upgrade to 1.30 if they use Apache::PerlRun for their applications. Users of mod_perl 2.03 are encouraged to check their custom code for calls to the namespace_from_uri() method and replace it with the namespace_from_filename() method.
Please note!
mod_perl-1.24_01.tar.gz or later is required for Apache >= 1.3.14.
![[ICO]](/icons/blank.gif){kind=icon} | Name | Last modified | Size | Description |
|---|---|---|---|---|
![[DIR]](/icons/back.gif){kind=icon} | Parent Directory | - | ||
![[ ]](/icons/unknown.gif){kind=icon} | KEYS | 03-Feb-2011 14:36 | 39K | |
![[ ]](/icons/hand.right.gif){kind=icon} | README | 01-Aug-2002 20:53 | 4.3K | |
![[ ]](/icons/compressed.gif){kind=icon} | mod_perl-1.31.tar.gz | 12-May-2009 21:32 | 381K | |
| mod_perl-1.31.tar.gz.asc | 12-May-2009 21:32 | 194 | |
![[DIR]](/icons/folder.gif){kind=icon} | mod_perl-1.31/ | 11-May-2009 21:04 | - | |
| mod_perl-2.0.5.tar.gz | 07-Feb-2011 17:35 | 3.6M | |
| mod_perl-2.0.5.tar.gz.asc | 07-Feb-2011 17:35 | 487 | |
| mod_perl-2.0.5/ | 07-Feb-2011 16:13 | - | |
| mod_perl-2.0.6.tar.gz | 25-Apr-2012 10:34 | 3.6M | |
| mod_perl-2.0.6.tar.gz.asc | 25-Apr-2012 10:34 | 495 | |
| mod_perl-2.0.6/ | 25-Apr-2012 00:31 | - | |