CVE-2011-2767
libapache2-mod-perl2: mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess f...
CVE-2011-2767 is fixed in libapache2-mod-perl2 on 1 platform by libapache2-mod-perl2 2.0.10-2ubuntu3.18.04.1 (version 2.0.10-2ubuntu3.18.04.1), released August 25, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0883
95th percentile
mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libapache2-mod-perl2 · Ubuntu 18.04.6 LTS (bionic) | 2.0.10-2ubuntu3.18.04.1 | libapache2-mod-perl2 2.0.10-2ubuntu3.18.04.1 | Aug 25, 2018 |