/ 
mod_perl-2.0.0-RC2-XMas
/ APR::BucketAlloc
Security Advisories (1)
CVE-2011-2767 (2018-08-26)

mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.

NAME

APR::BucketAlloc - Perl API for Bucket Allocation

Synopsis

Description

APR::BucketAlloc is used for bucket allocation.

At the moment APR::BucketAlloc is a virtual class, which doesn't exists as a module/package - so you don't need to load it, nor does it contain any callable methods or functions.

Objects blessed into APR::BucketAlloc class, are returned by $c->bucket_alloc, APR::Bucket::alloc_create and $bb->bucket_alloc, and used by APR::Brigade->new and APR::Bucket->new.

APR::Bucket::alloc_create can be used outside the httpd.

See Also

mod_perl 2.0 documentation.

Copyright

mod_perl 2.0 and its core modules are copyrighted under The Apache Software License, Version 2.0.

Authors

The mod_perl development team and numerous contributors.