Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Ubuntu 12.04 ESM USN-3825-2 Critical: mod_perl Arbitrary Code Execution

Ubuntu Large Esm H500
mod_perl could be made to run programs contrary to expectations.
=========================================================================Ubuntu Security Notice USN-3825-2
November 22, 2018

libapache2-mod-perl2 vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 ESM

Summary:

mod_perl could be made to run programs contrary to expectations.

Software Description:
- libapache2-mod-perl2: Integration of perl with the Apache2 web server

Details:

USN-3825-1 fixed a vulnerability in mod_perl. This update provides
the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 Jan Ingvoldstad discovered that mod_perl incorrectly handled
 configuration options to disable being used by unprivileged users,
 contrary to the documentation. A local attacker could possibly use
 this issue to execute arbitrary Perl code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  libapache2-mod-perl2            2.0.5-5ubuntu1.1

In general, a standard system update will make all the necessary
changes.

References:
  https://ubuntu.com/security/notices/USN-3825-2
  https://ubuntu.com/security/notices/USN-3825-1
  CVE-2011-2767

Ubuntu 12.04 ESM USN-3825-2 Critical: mod_perl Arbitrary Code Execution

ubuntu
Calendar Grey November 22, 2018
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-3826-1 reports a flaw in the OpenSSL package, enabling unauthorized users to compromise sensitive data.
mod_perl could be made to run programs contrary to expectations.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM:   libapache2-mod-perl2            2.0.5-5ubuntu1.1 In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-3825-2

  https://ubuntu.com/security/notices/USN-3825-1

  CVE-2011-2767

Severity
critical
Lowest
Low
Medium
High
Critical

November 22, 2018

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here