CVE-2011-2767 mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that....
CriticalCVSS 9.8
EPSS 8.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libapache2-mod-perl2(Debian:12) | < 2.0.10-3 | 2.0.10-3 |
| debian/libapache2-mod-perl2(Debian:13) | < 2.0.10-3 | 2.0.10-3 |
| debian/libapache2-mod-perl2(Debian:14) | < 2.0.10-3 | 2.0.10-3 |
| apache mod perl | >= 2.0.0, <= 2.0.10 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux | = 6.7 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux | = 7.3 | No fix listed |
| redhat enterprise linux | = 7.4 | No fix listed |
| redhat enterprise linux | = 7.5 | No fix listed |
| redhat enterprise linux | = 7.6 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.10 | No fix listed |
References
- Debian Security Tracker CVE-2011-2767 vendor-advisory
- openSUSE-SU-2019:2549 vendor-advisory
- openSUSE-SU-2019:2558 vendor-advisory
- 105195 third-party-advisory vdb-entry
- RHSA-2018:2737 third-party-advisory vendor-advisory
- RHSA-2018:2825 third-party-advisory vendor-advisory
- RHSA-2018:2826 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking mailing-list third-party-advisory
- [perl-modperl-cvs] 20190924 svn commit: r1867470 - /perl/modperl/trunk/src/modules/perl/mod_perl.c mailing-list
- [debian-lts-announce] 20180918 [SECURITY] [DLA 1507-1] libapache2-mod-perl2 security update mailing-list third-party-advisory
- mail-archives.apache.org mailing-list third-party-advisory
- USN-3825-1 third-party-advisory vendor-advisory
- USN-3825-2 third-party-advisory vendor-advisory