CVE-2007-1349: Input Validation
PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1349?
CVE-2007-1349 has been classified as a high severity vulnerability due to the potential for denial of service resulting from insufficient input validation.
How do I fix CVE-2007-1349?
To fix CVE-2007-1349, update Apache mod_perl to version 1.30 or later for mod_perl 1.x, or ensure you are using a fixed version for mod_perl 2.x.
Who is affected by CVE-2007-1349?
CVE-2007-1349 affects users of Apache mod_perl versions before 1.30 and specific versions of Ubuntu and Red Hat enterprise Linux.
What type of attack does CVE-2007-1349 enable?
CVE-2007-1349 allows remote attackers to execute a denial of service attack through resource consumption by sending crafted URIs.
Is CVE-2007-1349 a local or remote vulnerability?
CVE-2007-1349 is considered a remote vulnerability, allowing attackers to exploit it without local access to the system.