Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-5705HistoryApr 15, 2014 - 10:55 a.m.
CVE-2013-5705
2014-04-1510:55:11
Debian Security Bug Tracker
security-tracker.debian.org
9
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.008 Low
EPSS
Percentile
81.9%
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | modsecurity-apache | < 2.7.7-1 | modsecurity-apache_2.7.7-1_all.deb |
| Debian | 11 | all | modsecurity-apache | < 2.7.7-1 | modsecurity-apache_2.7.7-1_all.deb |
| Debian | 999 | all | modsecurity-apache | < 2.7.7-1 | modsecurity-apache_2.7.7-1_all.deb |
| Debian | 13 | all | modsecurity-apache | < 2.7.7-1 | modsecurity-apache_2.7.7-1_all.deb |
Related
nessus
nessus
Amazon Linux AMI : mod24_security (ALAS-2014-334)
2014-10-12 00:00:00
Fedora 20 : mod_security-2.7.5-3.fc20 (2014-4633)
2014-04-15 00:00:00
SuSE 11.3 Security Update : apache2-mod_security2 (SAT Patch Number 9585)
2014-08-09 00:00:00
openvas
openvas
Debian Security Advisory DSA 2991-1 (modsecurity-apache - security update)
2014-07-27 00:00:00
Fedora Update for mod_security FEDORA-2014-4720
2014-04-15 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-334)
2015-09-08 00:00:00
securityvulns
securityvulns
Apache mod_security protection bypass
2014-05-10 00:00:00
[ MDVSA-2014:081 ] apache-mod_security
2014-05-10 00:00:00
debian
debian
[SECURITY] [DSA 2991-1] modsecurity-apache security update
2014-07-27 17:53:46
[DLA 34-1] libapache-mod-security security update
2014-08-09 13:56:43
[SECURITY] [DSA 2991-1] modsecurity-apache security update
2014-07-27 17:53:46
prion
prion
Authentication flaw
2014-04-15 10:55:00
cvelist
cvelist
CVE-2013-5705
2014-04-15 10:00:00
cve
cve
CVE-2013-5705
2014-04-15 10:55:11
ubuntucve
ubuntucve
CVE-2013-5705
2014-04-15 00:00:00
nvd
nvd
CVE-2013-5705
2014-04-15 10:55:11
seebug
seebug
ModSecurity HTTP请求分块编码安全限制绕过漏洞
2014-04-02 00:00:00
amazon
amazon
Medium: mod24_security
2014-05-06 22:19:00
Medium: mod_security
2014-05-06 22:19:00
fedora
fedora
[SECURITY] Fedora 20 Update: mod_security-2.7.5-3.fc20
2014-04-14 22:41:25
[SECURITY] Fedora 19 Update: mod_security-2.7.5-3.fc19
2014-04-14 22:33:53
mageia
mageia
Updated apache-mod_security packages fix security vulnerability
2014-04-18 00:26:15
osv
osv
modsecurity-apache - security update
2014-07-27 00:00:00
checkpoint_advisories
checkpoint_advisories
suse
suse
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.008 Low
EPSS
Percentile
81.9%
Related for DEBIANCVE:CVE-2013-5705