Lucene search
RootSSV:62035HistoryApr 02, 2014 - 12:00 a.m.
ModSecurity HTTP请求分块编码安全限制绕过漏洞
2014-04-0200:00:00
Root
www.seebug.org
9
0.008 Low
EPSS
Percentile
81.9%
CVE ID:CVE-2013-5705
ModSecurity是一个入侵侦测与防护引擎,它主要是用于Web应用程序,所以也被称为Web应用程序防火墙。
ModSecurity 2.7.6之前版本在"modsecurity_tx_init()"函数(apache2/modsecurity.c)的实现中存在错误，恶意用户通过分块编码的特制请求，利用此漏洞可绕过HTTP请求主体处理。
0
modsecurity modsecurity < 2.7.6
目前厂商已经发布了升级补丁以修复漏洞，请下载使用：
http://sourceforge.net/projects/mod-security/
Related
nessus
nessus
Amazon Linux AMI : mod24_security (ALAS-2014-334)
2014-10-12 00:00:00
Fedora 20 : mod_security-2.7.5-3.fc20 (2014-4633)
2014-04-15 00:00:00
SuSE 11.3 Security Update : apache2-mod_security2 (SAT Patch Number 9585)
2014-08-09 00:00:00
openvas
openvas
Debian Security Advisory DSA 2991-1 (modsecurity-apache - security update)
2014-07-27 00:00:00
Fedora Update for mod_security FEDORA-2014-4720
2014-04-15 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-334)
2015-09-08 00:00:00
securityvulns
securityvulns
Apache mod_security protection bypass
2014-05-10 00:00:00
[ MDVSA-2014:081 ] apache-mod_security
2014-05-10 00:00:00
prion
prion
Authentication flaw
2014-04-15 10:55:00
debian
debian
[SECURITY] [DSA 2991-1] modsecurity-apache security update
2014-07-27 17:53:46
[DLA 34-1] libapache-mod-security security update
2014-08-09 13:56:43
[SECURITY] [DSA 2991-1] modsecurity-apache security update
2014-07-27 17:53:46
cvelist
cvelist
CVE-2013-5705
2014-04-15 10:00:00
cve
cve
CVE-2013-5705
2014-04-15 10:55:11
ubuntucve
ubuntucve
CVE-2013-5705
2014-04-15 00:00:00
nvd
nvd
CVE-2013-5705
2014-04-15 10:55:11
amazon
amazon
Medium: mod24_security
2014-05-06 22:19:00
Medium: mod_security
2014-05-06 22:19:00
fedora
fedora
[SECURITY] Fedora 20 Update: mod_security-2.7.5-3.fc20
2014-04-14 22:41:25
[SECURITY] Fedora 19 Update: mod_security-2.7.5-3.fc19
2014-04-14 22:33:53
mageia
mageia
Updated apache-mod_security packages fix security vulnerability
2014-04-18 00:26:15
osv
osv
modsecurity-apache - security update
2014-07-27 00:00:00
debiancve
debiancve
CVE-2013-5705
2014-04-15 10:55:11
checkpoint_advisories
checkpoint_advisories
suse
suse