View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2011-2767 severity moderate: SUSE including 13 source package names (apache2-mod_perl-2.0.11-2.12, apache2-mod_perl-2.0.11-bp150.3.3.1, …), 21 product×package rows across 16 product lines (SUSE Linux Enterprise Point of Sale 11 SP3, SUSE Linux Enterprise Server 11 SP1-TERADATA, … (16 product lines)): Fixed 21.
mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.