NVD

Id
53534  
Name
CVE-2007-1349  
Description
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-03-29  
Modified Date
2012-11-05  
Seq
2007-1349  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271119 53534 CVE-2007-1349 20070602-01-P  View
271120 53534 CVE-2007-1349 oval:org.mitre.oval:def:10987  View
271121 53534 CVE-2007-1349 oval:org.mitre.oval:def:8349  View
271122 53534 CVE-2007-1349 RHSA-2007:0395  View
271123 53534 CVE-2007-1349 RHSA-2008:0630  View
271124 53534 CVE-2007-1349 GLSA-200705-04  View
271125 53534 CVE-2007-1349 248386  View
271126 53534 CVE-2007-1349 1021508  View
271127 53534 CVE-2007-1349 http://support.avaya.com/elmodocs2/security/ASA-2007-293.htm  View
271128 53534 CVE-2007-1349 http://svn.apache.org/repos/asf/perl/modperl/branches/1.x/Changes  View
271129 53534 CVE-2007-1349 http://www.gossamer-threads.com/lists/modperl/modperl/92739  View
271130 53534 CVE-2007-1349 MDKSA-2007:083  View
271131 53534 CVE-2007-1349 SUSE-SR:2007:012  View
271132 53534 CVE-2007-1349 SUSE-SR:2007:008  View
271133 53534 CVE-2007-1349 RHSA-2007:0396  View
271134 53534 CVE-2007-1349 RHSA-2007:0486  View
271135 53534 CVE-2007-1349 RHSA-2008:0261  View
271136 53534 CVE-2007-1349 RHSA-2008:0627  View
271137 53534 CVE-2007-1349 23192  View
271138 53534 CVE-2007-1349 1018259  View
271139 53534 CVE-2007-1349 USN-488-1  View
271140 53534 CVE-2007-1349 ADV-2007-1150  View
271141 53534 CVE-2007-1349 modperl-pathinfo-dos(33312)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51801 JVNDB-2007-000464 Apache mod_perl の PerlRun.pm および RegistryCooker.pm におけるサービス運用妨害 (DoS) の脆弱性 Apache HTTP Server の mod_perl における PerlRun.pm および RegistryCooker.pm には正規表現の処理の前に PATH_INFO 変数を適切にエスケープ処理しない問題があるため、不正な URI を処理した際に、リソースを大量に消費してしまう脆弱性が存在します。 CVE-2007-1349 24704 CVE-2007-1349 53534 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000464.html 2007-03-29 2009-12-14 View