CVE-2007-1349
Published Mar 30, 2007
Last updated 3 years ago
Overview
- Description
- PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.
- Source
- secalert@redhat.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-20
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:mod_perl:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46A949B6-12FD-4D52-9C8B-587D92D37801",
"versionEndExcluding": "1.30"
},
{
"criteria": "cpe:2.3:a:apache:mod_perl:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6EE1F13-4DD6-4B7F-B301-DD7A52CCB8D9",
"versionEndIncluding": "2.0.11",
"versionStartIncluding": "2.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23E304C9-F780-4358-A58D-1E4C93977704"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:satellite:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E90E312-ED12-4EBB-AA88-603C91AF2BE9"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "951339CF-0922-4391-8C0C-9729E8137B91"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "397313C3-6BF5-4A87-90B3-55678E807171"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54D669D4-6D7E-449D-80C1-28FA44F06FFE"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2FE6DAA-4702-409A-98B6-DE13B12805A1"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B5DCF29-6830-45FF-BC88-17E2249C653D"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"
}
],
"operator": "OR"
}
]
}
]