CVE-2013-5704

2014-04-1500:00:00

ubuntu.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.467 Medium

EPSS

Percentile

97.5%

JSON

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote
attackers to bypass “RequestHeader unset” directives by placing a header in
the trailer portion of data sent with chunked transfer coding. NOTE: the
vendor states “this is not a security issue in httpd as such.”

Bugs

Notes

Author	Note
mdeslaur	check for r1610814, r1610686, r1610707

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchapache2< 2.2.14-5ubuntu8.15UNKNOWN
ubuntu12.04noarchapache2< 2.2.22-1ubuntu1.8UNKNOWN
ubuntu14.04noarchapache2< 2.4.7-1ubuntu4.4UNKNOWN
ubuntu14.10noarchapache2< 2.4.10-1ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	apache2	< 2.2.14-5ubuntu8.15	UNKNOWN
ubuntu	12.04	noarch	apache2	< 2.2.22-1ubuntu1.8	UNKNOWN
ubuntu	14.04	noarch	apache2	< 2.4.7-1ubuntu4.4	UNKNOWN
ubuntu	14.10	noarch	apache2	< 2.4.10-1ubuntu1.1	UNKNOWN