Lucene search
HistoryApr 15, 2014 - 10:55 a.m.
CVE-2013-5705
cve-2013-5705
modsecurity
apache2
remote attackers
bypass rules
chunked transfer coding
http header
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
82.0%
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.
Affected configurations
Node
trustwavemodsecurityRange<2.7.6
Node
debiandebian_linuxMatch7.0
ORdebiandebian_linuxMatch8.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| trustwave:modsecurity | trustwave modsecurity | lt | 2.7.6 |
Related
nessus
nessus
Amazon Linux AMI : mod24_security (ALAS-2014-334)
2014-10-12 00:00:00
Fedora 20 : mod_security-2.7.5-3.fc20 (2014-4633)
2014-04-15 00:00:00
SuSE 11.3 Security Update : apache2-mod_security2 (SAT Patch Number 9585)
2014-08-09 00:00:00
openvas
openvas
Debian Security Advisory DSA 2991-1 (modsecurity-apache - security update)
2014-07-27 00:00:00
Fedora Update for mod_security FEDORA-2014-4720
2014-04-15 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-334)
2015-09-08 00:00:00
securityvulns
securityvulns
Apache mod_security protection bypass
2014-05-10 00:00:00
[ MDVSA-2014:081 ] apache-mod_security
2014-05-10 00:00:00
debian
debian
[SECURITY] [DSA 2991-1] modsecurity-apache security update
2014-07-27 17:53:46
[SECURITY] [DSA 2991-1] modsecurity-apache security update
2014-07-27 17:53:46
[DLA 34-1] libapache-mod-security security update
2014-08-09 13:56:43
prion
prion
Authentication flaw
2014-04-15 10:55:00
cvelist
cvelist
CVE-2013-5705
2014-04-15 10:00:00
ubuntucve
ubuntucve
CVE-2013-5705
2014-04-15 00:00:00
nvd
nvd
CVE-2013-5705
2014-04-15 10:55:11
amazon
amazon
Medium: mod24_security
2014-05-06 22:19:00
Medium: mod_security
2014-05-06 22:19:00
fedora
fedora
[SECURITY] Fedora 20 Update: mod_security-2.7.5-3.fc20
2014-04-14 22:41:25
[SECURITY] Fedora 19 Update: mod_security-2.7.5-3.fc19
2014-04-14 22:33:53
seebug
seebug
ModSecurity HTTP请求分块编码安全限制绕过漏洞
2014-04-02 00:00:00
mageia
mageia
Updated apache-mod_security packages fix security vulnerability
2014-04-18 00:26:15
osv
osv
modsecurity-apache - security update
2014-07-27 00:00:00
debiancve
debiancve
CVE-2013-5705
2014-04-15 10:55:11
checkpoint_advisories
checkpoint_advisories
suse
suse
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
82.0%
Related for CVE-2013-5705