Skip to content

Commit 43d1cf6

Browse files
author
Steve Hay
committed
Fix [CVE-2011-2767] Arbitrary Perl code execution in the context of the user account via a user-owned .htaccess
Patch by Jan Ingvoldstad <[email protected]> from https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=644169#19 (See also https://rt.cpan.org/Ticket/Display.html?id=126984) git-svn-id: https://svn.apache.org/repos/asf/perl/modperl/trunk@1867470 13f79535-47bb-0310-9956-ffa450edef68
1 parent ea85218 commit 43d1cf6

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

src/modules/perl/mod_perl.c

+6-6
Original file line numberDiff line numberDiff line change
@@ -939,18 +939,18 @@ static const command_rec modperl_cmds[] = {
939939
MP_CMD_DIR_ITERATE2("PerlAddVar", add_var, "PerlAddVar"),
940940
MP_CMD_DIR_TAKE2("PerlSetEnv", set_env, "PerlSetEnv"),
941941
MP_CMD_SRV_TAKE1("PerlPassEnv", pass_env, "PerlPassEnv"),
942-
MP_CMD_DIR_RAW_ARGS_ON_READ("<Perl", perl, "Perl Code"),
943-
MP_CMD_DIR_RAW_ARGS("Perl", perldo, "Perl Code"),
942+
MP_CMD_SRV_RAW_ARGS_ON_READ("<Perl", perl, "Perl Code"),
943+
MP_CMD_SRV_RAW_ARGS("Perl", perldo, "Perl Code"),
944944

945945
MP_CMD_DIR_TAKE1("PerlSetInputFilter", set_input_filter,
946946
"filter[;filter]"),
947947
MP_CMD_DIR_TAKE1("PerlSetOutputFilter", set_output_filter,
948948
"filter[;filter]"),
949949

950-
MP_CMD_DIR_RAW_ARGS_ON_READ("=pod", pod, "Start of POD"),
951-
MP_CMD_DIR_RAW_ARGS_ON_READ("=back", pod, "End of =over"),
952-
MP_CMD_DIR_RAW_ARGS_ON_READ("=cut", pod_cut, "End of POD"),
953-
MP_CMD_DIR_RAW_ARGS_ON_READ("__END__", END, "Stop reading config"),
950+
MP_CMD_SRV_RAW_ARGS_ON_READ("=pod", pod, "Start of POD"),
951+
MP_CMD_SRV_RAW_ARGS_ON_READ("=back", pod, "End of =over"),
952+
MP_CMD_SRV_RAW_ARGS_ON_READ("=cut", pod_cut, "End of POD"),
953+
MP_CMD_SRV_RAW_ARGS_ON_READ("__END__", END, "Stop reading config"),
954954

955955
MP_CMD_SRV_RAW_ARGS("PerlLoadModule", load_module, "A Perl module"),
956956
#ifdef MP_TRACE

0 commit comments

Comments
 (0)