diff options
| author | Erwin Lansing <erwin@FreeBSD.org> | 2007-04-26 03:05:44 +0800 |
|---|---|---|
| committer | Erwin Lansing <erwin@FreeBSD.org> | 2007-04-26 03:05:44 +0800 |
| commit | 1b24a292e8dc88ea561283aa6db024ab6aa28603 (patch) | |
| tree | da8fba33e8c01f2568712d01d8d52f2578611aa1 /security | |
| parent | 6487bd53dcde41819cf4dbcc90f6ec1c63f739d4 (diff) | |
| download | freebsd-ports-gnome-1b24a292e8dc88ea561283aa6db024ab6aa28603.tar.gz freebsd-ports-gnome-1b24a292e8dc88ea561283aa6db024ab6aa28603.tar.zst freebsd-ports-gnome-1b24a292e8dc88ea561283aa6db024ab6aa28603.zip | |
Rework the mod_perl entry to note that Mandriva originally released
an advisory. Also add mod_perl2 to the vulnerable versions.
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 4538f1d74b8c..42b4885ea531 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -41,11 +41,15 @@ Note: Please add new entries to the beginning of this file. <name>mod_perl</name> <range><lt>1.30</lt></range> </package> + <package> + <name>mod_perl2</name> + <range><ge>0</ge></range> + </package> </affects> <description> <body xmlns="http://www.w3.org/1999/xhtml"> - <p>CVE reports:</p> - <blockquote cite="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1349"> + <p>Mandriva reports:</p> + <blockquote cite="http://www.mandriva.com/security/advisories?name=MDKSA-2007:083"> <p>PerlRun.pm in Apache mod_perl 1.29 and earlier, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service @@ -55,6 +59,7 @@ Note: Please add new entries to the beginning of this file. </description> <references> <cvename>CVE-2007-1349</cvename> + <url>http://www.mandriva.com/security/advisories?name=MDKSA-2007:083</url> <url>http://secunia.com/advisories/24839</url> </references> <dates> |