Description: | Mod_perl incorporates a Perl interpreter into the Apache web server, so that the Apache web server can directly execute Perl code.
An issue was found in the "namespace_from_uri" method of the ModPerl::RegistryCooker class. If a server implemented a mod_perl registry module using this method, a remote attacker requesting a carefully crafted URI can cause resource consumption, which could lead to a denial of service (CVE-2007-1349).
Users of mod_perl should update to these erratum packages which contain a backported fix to correct this issue.
|