CVE:CVE-2007-1349
CNNVD:CNNVD-200703-667
mod_perl模块可以让Perl程序员更好地控制Apache服务器。
mod_perl模块在处理path_info变量时存在漏洞，远程攻击者可能利用此漏洞对服务器执行拒绝服务攻击。
mod_perl模块中RegistryCooker.pm或PerlRun.pm正则表达式在使用path_info变量时没有正确地处理转义，如果攻击者向有漏洞的服务器发送了特制URL请求的话就可以导致拒绝服务。
solution:Upgrade apache mod_perl to a higher version than 1.30,2.0.11,and avoid the version (,1.30),[2.0.0,2.0.11]; Upgrade canonical ubuntu_linux to a higher version than 6.06,6.10,7.04,and avoid the version 6.06,6.10,7.04; Upgrade redhat satellite to a higher version than 5.1,and avoid the version 5.1; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,4.0,5.0,and avoid the version 3.0,4.0,5.0; Upgrade redhat enterprise_linux_eus to a higher version than 4.5,and avoid the version 4.5; Upgrade redhat enterprise_linux_server to a higher version than 3.0,4.0,5.0,and avoid the version 3.0,4.0,5.0; Upgrade redhat enterprise_linux_workstation to a higher version than 3.0,4.0,5.0,and avoid the version 3.0,4.0,5.0