Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
httpdApache Team FoundationHTTPD:0ABCC6920F62A5A91239DB17A9572874
HistoryMar 13, 2013 - 12:00 a.m.

Apache Httpd < 2.0.65 : mod_rewrite log escape filtering

2013-03-1300:00:00
Apache Team Foundation
httpd.apache.org
20

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.31

Percentile

97.0%

JSON

mod_rewrite does not filter terminal escape sequences from logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.

Affected configurations

Vulners
Node
apacheapache_httpdMatch2.0.64
OR
apacheapache_httpdMatch2.0.63
OR
apacheapache_httpdMatch2.0.61
OR
apacheapache_httpdMatch2.0.59
OR
apacheapache_httpdMatch2.0.58
OR
apacheapache_httpdMatch2.0.55
OR
apacheapache_httpdMatch2.0.54
OR
apacheapache_httpdMatch2.0.53
OR
apacheapache_httpdMatch2.0.52
OR
apacheapache_httpdMatch2.0.51
OR
apacheapache_httpdMatch2.0.50
OR
apacheapache_httpdMatch2.0.49
OR
apacheapache_httpdMatch2.0.48
OR
apacheapache_httpdMatch2.0.47
OR
apacheapache_httpdMatch2.0.46
OR
apacheapache_httpdMatch2.0.45
OR
apacheapache_httpdMatch2.0.44
OR
apacheapache_httpdMatch2.0.43
OR
apacheapache_httpdMatch2.0.42
OR
apacheapache_httpdMatch2.0.40
OR
apacheapache_httpdMatch2.0.39
OR
apacheapache_httpdMatch2.0.37
OR
apacheapache_httpdMatch2.0.36
OR
apacheapache_httpdMatch2.0.35
VendorProductVersionCPE
apacheapache_httpd2.0.64cpe:2.3:a:apache:apache_httpd:2.0.64:*:*:*:*:*:*:*
apacheapache_httpd2.0.63cpe:2.3:a:apache:apache_httpd:2.0.63:*:*:*:*:*:*:*
apacheapache_httpd2.0.61cpe:2.3:a:apache:apache_httpd:2.0.61:*:*:*:*:*:*:*
apacheapache_httpd2.0.59cpe:2.3:a:apache:apache_httpd:2.0.59:*:*:*:*:*:*:*
apacheapache_httpd2.0.58cpe:2.3:a:apache:apache_httpd:2.0.58:*:*:*:*:*:*:*
apacheapache_httpd2.0.55cpe:2.3:a:apache:apache_httpd:2.0.55:*:*:*:*:*:*:*
apacheapache_httpd2.0.54cpe:2.3:a:apache:apache_httpd:2.0.54:*:*:*:*:*:*:*
apacheapache_httpd2.0.53cpe:2.3:a:apache:apache_httpd:2.0.53:*:*:*:*:*:*:*
apacheapache_httpd2.0.52cpe:2.3:a:apache:apache_httpd:2.0.52:*:*:*:*:*:*:*
apacheapache_httpd2.0.51cpe:2.3:a:apache:apache_httpd:2.0.51:*:*:*:*:*:*:*
Rows per page:
1-10 of 241

Related

openvas 18
cvelist 1
ibm 6
cve 1
checkpoint_advisories 2
debiancve 1
f5 2
cisco 1
prion 1
mageia 1
seebug 1
nessus 33
ubuntucve 1
veracode 2
httpd 1
nvd 1
redhat 6
freebsd 1
kaspersky 2
ubuntu 1
oraclelinux 1
amazon 2
centos 1
securityvulns 4
gentoo 1
suse 1
hackerone 2
oracle 1
openvas
openvas
Apache HTTP Server Log Escape Filtering Vulnerability (Jul 2013) - Linux
2021-11-01 00:00:00
Mageia: Security Advisory (MGASA-2013-0174)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:1824-1)
2021-06-09 00:00:00
cvelist
cvelist
CVE-2013-1862
2013-06-10 17:00:00
ibm
ibm
Security Bulletin: Potential Security exposure in IBM HTTP Server CVE-2013-1862 PM87808
2022-09-25 23:13:40
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.7
2022-09-25 21:06:56
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.31
2018-06-15 06:59:10
cve
cve
CVE-2013-1862
2013-06-10 17:55:01
checkpoint_advisories
checkpoint_advisories
Apache HTTP Server mod_rewrite RewriteLog Command Execution - Ver2 (CVE-2013-1862)
2015-03-26 00:00:00
Apache HTTP Server mod_rewrite RewriteLog Command Execution (CVE-2013-1862)
2013-09-09 00:00:00
debiancve
debiancve
CVE-2013-1862
2013-06-10 17:55:01
f5
f5
SOL15877 - Apache vulnerability CVE-2013-1862
2014-11-27 00:00:00
K15877 : Apache vulnerability CVE-2013-1862
2015-06-08 00:00:00
cisco
cisco
Apache HTTP Server mod_rewrite Log File Manipulation Vulnerability
2013-05-30 19:48:16
prion
prion
Command injection
2013-06-10 17:55:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2013-06-19 14:11:42
seebug
seebug
Apache HTTP Serverζ—₯εΏ—ε†…η»ˆη«―θ½¬δΉ‰εΊεˆ—ε‘½δ»€ζ³¨ε…₯漏洞
2013-05-17 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : apache (MDVSA-2013:174)
2013-06-16 00:00:00
IBM HTTP Server 8.5.0.0 <= 8.5.5.0 / 8.0.0.0 <= 8.0.0.6 / 7.0.0.0 <= 7.0.0.29 / 6.1.0.0 <= 6.1.0.45 (491411)
2020-12-11 00:00:00
F5 Networks BIG-IP : Apache vulnerability (SOL15877)
2014-11-28 00:00:00
ubuntucve
ubuntucve
CVE-2013-1862
2013-06-10 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 08:57:06
Arbitrary Code Injection
2019-05-02 04:44:51
httpd
httpd
Apache Httpd < 2.2.25 : mod_rewrite log escape filtering
2013-03-13 00:00:00
nvd
nvd
CVE-2013-1862
2013-06-10 17:55:01
redhat
redhat
(RHSA-2013:1134) Moderate: httpd security update
2013-08-05 15:32:30
(RHSA-2013:1133) Moderate: httpd security update
2013-08-05 15:27:06
(RHSA-2013:0815) Moderate: httpd security update
2013-05-13 00:00:00
freebsd
freebsd
apache22 -- several vulnerabilities
2013-06-21 00:00:00
kaspersky
kaspersky
KLA10068 Multiple vulnerabilities in Apache httpd
2013-07-22 00:00:00
KLA10065 Multiple vulnerabilities in Apache httpd
2013-07-22 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2013-07-15 00:00:00
oraclelinux
oraclelinux
httpd security update
2013-05-13 00:00:00
amazon
amazon
Medium: httpd24
2013-05-24 13:57:00
Medium: httpd
2013-05-24 13:56:00
centos
centos
httpd, mod_ssl security update
2013-05-13 22:32:03
securityvulns
securityvulns
Apache security vulnerabilities
2013-07-15 00:00:00
APPLE-SA-2014-02-25-1 OS X Mavericks 10.9.2 and Security Update 2014-001
2014-02-28 00:00:00
Apple Mac OS X multiple security vulnerabilities
2014-02-28 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2013-09-23 00:00:00
suse
suse
Security update for apache2 (important)
2014-09-02 21:04:17
hackerone
hackerone
Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)
2015-06-09 17:47:58
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27
oracle
oracle
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.31

Percentile

97.0%

JSON
Related for HTTPD:0ABCC6920F62A5A91239DB17A9572874
openvas18cvelist1ibm6cve1checkpoint_advisories2debiancve1f52cisco1prion1mageia1seebug1nessus33ubuntucve1veracode2httpd1nvd1redhat6freebsd1kaspersky2ubuntu1oraclelinux1amazon2centos1securityvulns4gentoo1suse1hackerone2oracle1