The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3444:01 advisory.

    * mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess     (CVE-2011-2767)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 4.05, has mod_perl packages installed that are affected by a vulnerability:

  - mod_perl 2.0 through 2.0.10 allows attackers to execute     arbitrary Perl code by placing it in a user-owned     .htaccess file, because (contrary to the documentation)     there is no configuration option that permits Perl code     for the administrator's control of HTTP request     processing without also permitting unprivileged users to     run Perl code in the context of the user account that     runs Apache HTTP Server processes. (CVE-2011-2767)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3825-1 advisory.

    Jan Ingvoldstad discovered that mod_perl incorrectly handled configuration options to disable being used     by unprivileged users, contrary to the documentation. A local attacker could possibly use this issue to     execute arbitrary Perl code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2020:14266-1 advisory.

  - mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned     .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl     code for the administrator's control of HTTP request processing without also permitting unprivileged users     to run Perl code in the context of the user account that runs Apache HTTP Server processes.
    (CVE-2011-2767)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Jan Ingvoldstad discovered that libapache2-mod-perl2 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.

For Debian 8 'Jessie', this problem has been fixed in version 2.0.9~1624218-2+deb8u3.

We recommend that you upgrade your libapache2-mod-perl2 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for apache2-mod_perl to version 2.0.11 fixes the following issues :

Security issue fixed :

  - CVE-2011-2767: Fixed a vulnerability which could have     allowed perl code execution in the context of user     account (bsc#1156944).

Other issue addressed :

  - Restore process name after sv_setpv_mg() call.
    (bsc#1091625)&#9;

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2825 advisory.

    Mod_perl incorporates a Perl interpreter into the Apache web server, such that the Apache HTTP server can     directly execute Perl code.

    Security Fix(es):

    * mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess     (CVE-2011-2767)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - mod_perl: arbitrary Perl code execution in the context     of the user account via a user-owned .htaccess     (CVE-2011-2767)

mod_perl allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.(CVE-2011-2767)

An update for mod_perl is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mod_perl incorporates a Perl interpreter into the Apache web server, such that the Apache HTTP server can directly execute Perl code.

Security Fix(es) :

* mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess (CVE-2011-2767)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2737 advisory.

    Mod_perl incorporates a Perl interpreter into the Apache web server, such that the Apache HTTP server can     directly execute Perl code.

    Security Fix(es):

    * mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess     (CVE-2011-2767)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
289217	MiracleLinux 7 : rh-perl524-mod_perl-2.0.9-10.el7 (AXSA:2019-3444:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
127391	NewStart CGSL MAIN 4.05 : mod_perl Vulnerability (NS-SA-2019-0134)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	critical
119118	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : mod_perl vulnerability (USN-3825-1)	Nessus	Ubuntu Local Security Checks	2018/11/23	2024/8/27	critical
150582	SUSE SLES11 Security Update : apache2-mod_perl (SUSE-SU-2020:14266-1)	Nessus	SuSE Local Security Checks	2021/6/10	2021/6/10	critical
117593	Debian DLA-1507-1 : libapache2-mod-perl2 security update	Nessus	Debian Local Security Checks	2018/9/19	2024/8/6	critical
131277	openSUSE Security Update : apache2-mod_perl (openSUSE-2019-2549)	Nessus	SuSE Local Security Checks	2019/11/25	2024/4/10	critical
210320	RHEL 7 : rh-perl526-mod_perl (RHSA-2018:2825)	Nessus	Red Hat Local Security Checks	2024/11/5	2024/11/5	critical
117682	Scientific Linux Security Update : mod_perl on SL6.x i386/x86_64 (20180924)	Nessus	Scientific Linux Local Security Checks	2018/9/25	2024/8/5	critical
117922	Amazon Linux AMI : mod_perl / mod24_perl (ALAS-2018-1085)	Nessus	Amazon Linux Local Security Checks	2018/10/5	2022/2/10	critical
117828	CentOS 6 : mod_perl (CESA-2018:2737)	Nessus	CentOS Local Security Checks	2018/10/1	2022/2/24	critical
117681	RHEL 6 : mod_perl (RHSA-2018:2737)	Nessus	Red Hat Local Security Checks	2018/9/25	2024/11/5	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical