A vulnerability has been reported in mod_perl, which potentially can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to a regular expression in "RegistryCooker.pm" (mod_perl 2.x) or "PerlRun.pm" (mod_perl 1.x) that uses the "path_info" variable without properly escaping it. This can be exploited to cause a DoS by sending requests with specially crafted URLs to a vulnerable server.

Solution
Fixed in the SVN repository and in version 1.30 of the mod_perl 1.x branch.

Provided and/or discovered by
Alex Solovey

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.gossamer-threads.com/lists/modperl/modperl/92739

Deep Links
Links available to Secunia VIM customers