URL regular expression DoS (CVE-2007-1349)
A flaw was discovered in the Apache::PerlRun module shipped with mod_perl 1.29 and earlier and in the ModPerl::RegistryCooker module shipped with mod_perl 2.03 and earlier. A remote attacker could craft a URL with a path that would be interpreted as a regular expression, potentially allowing a denial of service by creating an expression that will take a very long time to run. This vulnerability only affects Apache::PerlRun and custom subclasses of ModPerl::RegistryCooker that explicitly use the namespace_from_uri() method. The Apache::Registry, ModPerl::PerlRun, and ModPerl::Registry modules are NOT affected.

Users of mod_perl 1.29 and earlier are encouraged to upgrade to 1.30 if they use Apache::PerlRun for their applications. Users of mod_perl 2.03 are encouraged to check their custom code for calls to the namespace_from_uri() method and replace it with the namespace_from_filename() method.

Please note!
mod_perl-1.24_01.tar.gz or later is required for Apache >= 1.3.14.

 Name                            Last modified      Size  Description
 Parent Directory                                     -   
 KEYS                            17-May-2008 12:18   37K  Developer PGP/GPG keys
 contrib/                        25-Feb-1999 23:42    -   
 mod_perl-1.0-current.tar.gz     30-Mar-2007 06:04  380K  
 mod_perl-1.0-current.tar.gz.asc 30-Mar-2007 06:07  186   PGP signature
 mod_perl-1.0-current/           30-Mar-2007 05:54    -   
 mod_perl-1.30.tar.gz            30-Mar-2007 06:04  380K  
 mod_perl-1.30.tar.gz.asc        30-Mar-2007 06:07  186   PGP signature
 mod_perl-1.30/                  30-Mar-2007 05:54    -   
 mod_perl-2.0-current.tar.gz     17-Apr-2008 06:20  3.6M  
 mod_perl-2.0-current.tar.gz.asc 17-Apr-2008 06:32  186   PGP signature
 mod_perl-2.0-current/           17-Apr-2008 06:20    -   
 mod_perl-2.0.3.tar.gz           29-Nov-2006 08:23  3.5M  
 mod_perl-2.0.3.tar.gz.asc       29-Nov-2006 08:30  189   PGP signature
 mod_perl-2.0.3/                 29-Nov-2006 08:10    -   
 mod_perl-2.0.4.tar.gz           17-Apr-2008 06:20  3.6M  
 mod_perl-2.0.4.tar.gz.asc       17-Apr-2008 06:32  186   PGP signature
 mod_perl-2.0.4/                 17-Apr-2008 06:20    -   
 old/                            17-Apr-2008 06:28    -   
 win32-bin/                      18-Apr-2007 03:33    -