Apache mod_perl 'Apache::Status' and 'Apache2::Status' Cross Site Scripting Vulnerability
Severity: LOW
CVE Identifier: CVE-2009-0796
Advisory Date: JUL 21, 2015
DESCRIPTION
Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI.
TREND MICRO PROTECTION INFORMATION
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1000552
Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention
AFFECTED SOFTWARE AND VERSION
- Apache Mod Perl 2
- Apache Mod Perl 1