URL regular expression DoS (CVE-2007-1349)
A flaw was discovered in the Apache::PerlRun module shipped with mod_perl 1.29 and earlier and in the ModPerl::RegistryCooker module shipped with mod_perl 2.03 and earlier. A remote attacker could craft a URL with a path that would be interpreted as a regular expression, potentially allowing a denial of service by creating an expression that will take a very long time to run. This vulnerability only affects Apache::PerlRun and custom subclasses of ModPerl::RegistryCooker that explicitly use the namespace_from_uri() method. The Apache::Registry, ModPerl::PerlRun, and ModPerl::Registry modules are NOT affected.

Users of mod_perl 1.29 and earlier are encouraged to upgrade to 1.30 if they use Apache::PerlRun for their applications. Users of mod_perl 2.03 are encouraged to check their custom code for calls to the namespace_from_uri() method and replace it with the namespace_from_filename() method.

Please note!
mod_perl-1.24_01.tar.gz or later is required for Apache >= 1.3.14.

[ICO]NameLast modifiedSizeDescription

[DIR]Parent Directory  -
[TXT]KEYS03-Feb-2011 22:36 39K
[   ]mod_perl-1.31.tar.gz13-May-2009 05:32 381K
[TXT]mod_perl-1.31.tar.gz.asc13-May-2009 05:32 194
[DIR]mod_perl-1.31/12-May-2009 05:04 -
[   ]mod_perl-2.0.5.tar.gz08-Feb-2011 01:35 3.6M
[TXT]mod_perl-2.0.5.tar.gz.asc08-Feb-2011 01:35 487
[DIR]mod_perl-2.0.5/08-Feb-2011 00:13 -
[   ]mod_perl-2.0.6.tar.gz25-Apr-2012 18:34 3.6M
[TXT]mod_perl-2.0.6.tar.gz.asc25-Apr-2012 18:34 495
[DIR]mod_perl-2.0.6/25-Apr-2012 08:31 -

Apache/2.2.3 (CentOS) Server at lnx.apollo-hw.ro Port 80