← Database

CVE-2007-1349

MEDIUM CVSS: 5.0 Published: 2007-03-30 Modified: 2026-06-16

Description

PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.

Affected Platforms

Canonical Ubuntu LinuxRedhat Enterprise Linux EusApache Mod PerlRedhat Enterprise Linux WorkstationRedhat Enterprise Linux DesktopRedhat Enterprise Linux ServerRedhat Satellite

Weakness Type

CWE-20

References