Home

CVE-2011-2767

Description

mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrators control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
3.632

Associated Vulnerability

VulnerabilityOS Platform
Integration of perl with the Apache2 web server (USN-3825-1) libapache2-mod-perl2_2.0.10-2ubuntu3.18.04.1_amd64.debLinux
Integration of perl with the Apache2 web server (USN-3825-1) libapache2-mod-perl2_2.0.10-2ubuntu3.18.04.1_i386.debLinux
Integration of perl with the Apache2 web server (USN-3825-1) libapache2-mod-perl2_2.0.10-2ubuntu3.18.10.1_amd64.debLinux
Integration of perl with the Apache2 web server (USN-3825-1) libapache2-mod-perl2_2.0.10-2ubuntu3.18.10.1_i386.debLinux
Integration of perl with the Apache2 web server (USN-3825-1) libapache2-mod-perl2_2.0.8+httpd24-r1449661-6ubuntu2.1_amd64.debLinux
Integration of perl with the Apache2 web server (USN-3825-1) libapache2-mod-perl2_2.0.8+httpd24-r1449661-6ubuntu2.1_i386.debLinux
Integration of perl with the Apache2 web server (USN-3825-1) libapache2-mod-perl2_2.0.9-4ubuntu1.2_amd64.debLinux
Integration of perl with the Apache2 web server (USN-3825-1) libapache2-mod-perl2_2.0.9-4ubuntu1.2_i386.debLinux
Mod_perl security update (CESA-2018:2737) mod_perl-2.0.4-12.el6_10.i686.rpmLinux
Mod_perl security update (CESA-2018:2737) mod_perl-2.0.4-12.el6_10.x86_64.rpmLinux
Mod_perl security update (CESA-2018:2737) mod_perl-devel-2.0.4-12.el6_10.i686.rpmLinux
Mod_perl security update (CESA-2018:2737) mod_perl-devel-2.0.4-12.el6_10.x86_64.rpmLinux
(RHSA-2018:2737) mod_perl security update mod_perl-2.0.4-12.el6_10.i686.rpmLinux
(RHSA-2018:2737) mod_perl security update mod_perl-2.0.4-12.el6_10.x86_64.rpmLinux
(RHSA-2018:2737) mod_perl security update mod_perl-devel-2.0.4-12.el6_10.i686.rpmLinux
(RHSA-2018:2737) mod_perl security update mod_perl-devel-2.0.4-12.el6_10.x86_64.rpmLinux
Mod_perl update (ELSA-2018-2737) mod_perl-2.0.4-12.el6_10.x86_64.rpmLinux
Mod_perl-devel update (ELSA-2018-2737) mod_perl-devel-2.0.4-12.el6_10.x86_64.rpmLinux
Mod_perl update (ELSA-2018-2737) mod_perl-2.0.4-12.el6_10.i686.rpmLinux
Mod_perl-devel update (ELSA-2018-2737) mod_perl-devel-2.0.4-12.el6_10.i686.rpmLinux
SUSE-SU-2019:3213-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-mod_perl-2.0.8-13.5.1.x86_64.rpmLinux
SUSE-SU-2019:3213-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-mod_perl-debuginfo-2.0.8-13.5.1.x86_64.rpmLinux
SUSE-SU-2019:3213-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-mod_perl-debugsource-2.0.8-13.5.1.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234