CVE-2011-2767 Code injection in mod perl 2.0 through 2.0.10
Attackers can execute arbitrary Perl code via .htaccess files in mod_perl, leading to remote code execution on the Apache server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-2767?
CVE-2011-2767 is a critical code injection vulnerability in Canonical Ubuntu Linux, published on 26 Aug 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.
Weakness: CWE-94
Which versions are affected by CVE-2011-2767?
It affects 7 products.
Linux distribution packages (33)
mod_perl Red Hat:enterprise_linux:6::client | All versions | 0:2.0.4-12.el6_10 |
mod_perl-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:2.0.4-12.el6_10 |
mod_perl-devel Red Hat:enterprise_linux:6::client | All versions | 0:2.0.4-12.el6_10 |
mod_perl Red Hat:enterprise_linux:6::computenode | All versions | 0:2.0.4-12.el6_10 |
mod_perl-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:2.0.4-12.el6_10 |
mod_perl-devel Red Hat:enterprise_linux:6::computenode | All versions | 0:2.0.4-12.el6_10 |
mod_perl Red Hat:enterprise_linux:6::server | All versions | 0:2.0.4-12.el6_10 |
mod_perl-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:2.0.4-12.el6_10 |
mod_perl-devel Red Hat:enterprise_linux:6::server | All versions | 0:2.0.4-12.el6_10 |
mod_perl Red Hat:enterprise_linux:6::workstation | All versions | 0:2.0.4-12.el6_10 |
mod_perl-debuginfo Red Hat:enterprise_linux:6::workstation | All versions | 0:2.0.4-12.el6_10 |
mod_perl-devel Red Hat:enterprise_linux:6::workstation | All versions | 0:2.0.4-12.el6_10 |
rh-perl524-mod_perl Red Hat:rhel_software_collections:3::el6 | All versions | 0:2.0.9-10.el6 |
rh-perl524-mod_perl-debuginfo Red Hat:rhel_software_collections:3::el6 | All versions | 0:2.0.9-10.el6 |
rh-perl524-mod_perl-devel Red Hat:rhel_software_collections:3::el6 | All versions | 0:2.0.9-10.el6 |
rh-perl524-mod_perl Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.0.9-10.el7 |
rh-perl524-mod_perl-debuginfo Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.0.9-10.el7 |
rh-perl524-mod_perl-devel Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.0.9-10.el7 |
rh-perl526-mod_perl Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.0.10-10.el7 |
rh-perl526-mod_perl-debuginfo Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.0.10-10.el7 |
rh-perl526-mod_perl-devel Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.0.10-10.el7 |
apache2-mod_perl SUSE:Linux Enterprise Point of Sale 11 SP3 | All versions | 2.0.4-40.63.3.3 |
apache2-mod_perl SUSE:Linux Enterprise Server 11 SP4-LTSS | All versions | 2.0.4-40.63.3.3 |
apache2-mod_perl SUSE:Linux Enterprise Server 12 SP4 | All versions | 2.0.8-13.5.1 |
apache2-mod_perl SUSE:Linux Enterprise Server 12 SP5 | All versions | 2.0.8-13.5.1 |
apache2-mod_perl SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 2.0.8-13.5.1 |
apache2-mod_perl SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 2.0.8-13.5.1 |
apache2-mod_perl SUSE:Linux Enterprise Software Development Kit 12 SP4 | All versions | 2.0.8-13.5.1 |
apache2-mod_perl SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 2.0.8-13.5.1 |
apache2-mod_perl SUSE:Package Hub 15 | All versions | 2.0.11-bp151.4.3.1 |
apache2-mod_perl SUSE:Package Hub 15 SP1 | All versions | 2.0.11-bp151.4.3.1 |
apache2-mod_perl openSUSE:Leap 15.0 | All versions | 2.0.11-lp151.3.3.1 |
apache2-mod_perl openSUSE:Leap 15.1 | All versions | 2.0.11-lp151.3.3.1 |
Products include Apache Mod Perl, Canonical Ubuntu Linux, Debian Debian Linux, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server and 1 more.
How do I fix CVE-2011-2767?
Apply the vendor's patch.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2011-2767 being exploited?
There is no known exploitation of CVE-2011-2767 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as DEBIAN-CVE-2011-2767, DLA-1507-1, GHSA-hm7f-5jxx-cwvg, MGASA-2018-0474, RHSA-2018:2737, RHSA-2018:2825 and 7 more.