tocsin

Debian/libapache2-mod-perl2: critical 9.8

mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that

Action: Upgrade libapache2-mod-perl2 to 2.0.10-3 or later.

Affected

introducedfixedlast affected
02.0.10-3-

Fixed versions

2.0.10-3

Sources

published · modified · JSON