mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess     (CVE-2011-2767)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2826 advisory.

  - mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess     (CVE-2011-2767)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2020:14266-1 advisory.

  - mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned     .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl     code for the administrator's control of HTTP request processing without also permitting unprivileged users     to run Perl code in the context of the user account that runs Apache HTTP Server processes.
    (CVE-2011-2767)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for apache2-mod_perl fixes the following issues :

Security issue fixed :

CVE-2011-2767: Fixed a vulnerability which could have allowed perl code execution in the context of user account (bsc#1156944).

Other issue addressed: Restore process name after sv_setpv_mg() call.
(bsc#1091625)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for apache2-mod_perl to version 2.0.11 fixes the following issues :

Security issue fixed :

  - CVE-2011-2767: Fixed a vulnerability which could have     allowed perl code execution in the context of user     account (bsc#1156944).

Other issue addressed :

  - Restore process name after sv_setpv_mg() call.
    (bsc#1091625)&#9;

mod_perl2 2.0.11 fixes Arbitrary Perl code execution in the context of the user account via a user-owned .htaccess.

mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.

The remote NewStart CGSL host, running version MAIN 4.05, has mod_perl packages installed that are affected by a vulnerability:

  - mod_perl 2.0 through 2.0.10 allows attackers to execute     arbitrary Perl code by placing it in a user-owned     .htaccess file, because (contrary to the documentation)     there is no configuration option that permits Perl code     for the administrator's control of HTTP request     processing without also permitting unprivileged users to     run Perl code in the context of the user account that     runs Apache HTTP Server processes. (CVE-2011-2767)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This release fixes CVE-2011-2767 vulnerability (an arbitrary Perl code execution in the context of the httpd server) by disabling <Perl> sections in non-server-level configuration.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3825-1 advisory.

    Jan Ingvoldstad discovered that mod_perl incorrectly handled configuration options to disable being used     by unprivileged users, contrary to the documentation. A local attacker could possibly use this issue to     execute arbitrary Perl code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

mod_perl allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.(CVE-2011-2767)

An update for mod_perl is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mod_perl incorporates a Perl interpreter into the Apache web server, such that the Apache HTTP server can directly execute Perl code.

Security Fix(es) :

* mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess (CVE-2011-2767)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Security Fix(es) :

  - mod_perl: arbitrary Perl code execution in the context     of the user account via a user-owned .htaccess     (CVE-2011-2767)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2737 advisory.

    [2.0.4-12]
    - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user       account via a user-owned .htaccess) (bug #1626272)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Jan Ingvoldstad discovered that libapache2-mod-perl2 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.

For Debian 8 'Jessie', this problem has been fixed in version 2.0.9~1624218-2+deb8u3.

We recommend that you upgrade your libapache2-mod-perl2 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199419	RHEL 5 : mod_perl (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
194072	RHEL 6 / 7 : rh-perl524-mod_perl (RHSA-2018:2826)	Nessus	Red Hat Local Security Checks	critical
150582	SUSE SLES11 Security Update : apache2-mod_perl (SUSE-SU-2020:14266-1)	Nessus	SuSE Local Security Checks	critical
131998	SUSE SLES12 Security Update : apache2-mod_perl (SUSE-SU-2019:3213-1)	Nessus	SuSE Local Security Checks	critical
131277	openSUSE Security Update : apache2-mod_perl (openSUSE-2019-2549)	Nessus	SuSE Local Security Checks	critical
129771	FreeBSD : mod_perl2 -- execute arbitrary Perl code (c360d057-ea8b-11e9-859b-b885849ded8e)	Nessus	FreeBSD Local Security Checks	critical
127391	NewStart CGSL MAIN 4.05 : mod_perl Vulnerability (NS-SA-2019-0134)	Nessus	NewStart CGSL Local Security Checks	critical
120916	Fedora 29 : mod_perl (2018-f6a5b71464)	Nessus	Fedora Local Security Checks	critical
120232	Fedora 28 : mod_perl (2018-0ddef94854)	Nessus	Fedora Local Security Checks	critical
119118	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : mod_perl vulnerability (USN-3825-1)	Nessus	Ubuntu Local Security Checks	critical
117922	Amazon Linux AMI : mod_perl / mod24_perl (ALAS-2018-1085)	Nessus	Amazon Linux Local Security Checks	critical
117828	CentOS 6 : mod_perl (CESA-2018:2737)	Nessus	CentOS Local Security Checks	critical
117682	Scientific Linux Security Update : mod_perl on SL6.x i386/x86_64 (20180924)	Nessus	Scientific Linux Local Security Checks	critical
117681	RHEL 6 : mod_perl (RHSA-2018:2737)	Nessus	Red Hat Local Security Checks	critical
117679	Oracle Linux 6 : mod_perl (ELSA-2018-2737)	Nessus	Oracle Linux Local Security Checks	critical
117593	Debian DLA-1507-1 : libapache2-mod-perl2 security update	Nessus	Debian Local Security Checks	critical
117374	Fedora 27 : mod_perl (2018-a94668408d)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2011-2767

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical