Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSDCA4D63FB-F15C-11E2-B183-20CF30E32F6D
HistoryJul 11, 2013 - 12:00 a.m.

apache24 -- several vulnerabilities

2013-07-1100:00:00
vuxml.freebsd.org
20

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.956 High

EPSS

Percentile

99.4%

JSON

Apache HTTP SERVER PROJECT reports:

mod_dav: Sending a MERGE request against a URI handled by mod_dav_svn
with the source href (sent as part of the request body as XML) pointing
to a URI that is not configured for DAV will trigger a segfault.
mod_session_dbd: Make sure that dirty flag is respected when saving
sessions, and ensure the session ID is changed each time the session
changes. This changes the format of the updatesession SQL statement.
Existing configurations must be changed.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchapache24< 2.4.6UNKNOWN

Related

nessus 38
openvas 23
fedora 2
mageia 2
slackware 1
securityvulns 4
httpd 3
nvd 2
veracode 1
cve 2
debiancve 2
f5 4
ubuntucve 2
ibm 6
seebug 2
prion 2
cvelist 2
centos 1
redhat 6
checkpoint_advisories 2
cisco 1
oraclelinux 1
kaspersky 1
ubuntu 1
freebsd 1
gentoo 1
suse 1
hackerone 2
nessus
nessus
Fedora 18 : httpd-2.4.6-2.fc18 (2013-13922)
2013-08-20 00:00:00
Fedora 19 : httpd-2.4.6-2.fc19 (2013-13994)
2013-08-10 00:00:00
Apache 2.4.x < 2.4.5 Multiple Vulnerabilities
2013-07-23 00:00:00
openvas
openvas
Fedora Update for httpd FEDORA-2013-13922
2013-08-20 00:00:00
Fedora Update for httpd FEDORA-2013-13994
2013-08-20 00:00:00
Fedora Update for httpd FEDORA-2013-13922
2013-08-20 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: httpd-2.4.6-2.fc18
2013-08-16 23:03:32
[SECURITY] Fedora 19 Update: httpd-2.4.6-2.fc19
2013-08-09 17:11:09
mageia
mageia
Updated apache packages fix security vulnerabilities
2013-07-26 15:36:22
Updated apache packages fix CVE-2013-1896
2013-07-26 15:34:30
slackware
slackware
[slackware-security] httpd
2013-08-06 07:20:43
securityvulns
securityvulns
Apache security vulnerabilities
2013-07-15 00:00:00
[ MDVSA-2013:193 ] apache
2013-07-15 00:00:00
Apple Mac OS X multiple security vulnerabilities
2014-02-28 00:00:00
httpd
httpd
Apache Httpd < 2.4.6 : mod_session_dbd session fixation flaw
2013-05-29 00:00:00
Apache Httpd < 2.4.6 : mod_dav crash
2013-03-07 00:00:00
Apache Httpd < 2.2.25 : mod_dav crash
2013-03-07 00:00:00
nvd
nvd
CVE-2013-2249
2013-07-23 17:20:43
CVE-2013-1896
2013-07-10 20:55:01
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:57:40
cve
cve
CVE-2013-2249
2013-07-23 17:20:43
CVE-2013-1896
2013-07-10 20:55:01
debiancve
debiancve
CVE-2013-2249
2013-07-23 17:20:43
CVE-2013-1896
2013-07-10 20:55:01
f5
f5
SOL14734 - Apache HTTP server vulnerability CVE-2013-2249
2013-10-03 00:00:00
K14734 : Apache HTTP server vulnerability CVE-2013-2249
2014-12-11 00:00:00
K14733 : Apache HTTP server vulnerability CVE-2013-1896
2014-12-10 00:00:00
ubuntucve
ubuntucve
CVE-2013-2249
2013-07-23 00:00:00
CVE-2013-1896
2013-07-10 00:00:00
ibm
ibm
Security Bulletin: Potential Security exposure in IBM HTTP Server CVE-2013-1896 PM89996
2022-09-25 21:06:56
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.7
2022-09-25 21:06:56
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.31
2018-06-15 06:59:10
seebug
seebug
Apache HTTP Server mod_session_dbd 远程安全漏洞(CVE-2013-2249)
2013-07-26 00:00:00
Apache HTTP Server mod_dav.c 拒绝服务漏洞(CVE-2013-1896)
2013-07-17 00:00:00
prion
prion
Design/Logic Flaw
2013-07-23 17:20:00
Design/Logic Flaw
2013-07-10 20:55:00
cvelist
cvelist
CVE-2013-2249
2013-07-23 15:00:00
CVE-2013-1896
2013-07-10 20:00:00
centos
centos
httpd, mod_ssl security update
2013-08-13 17:32:49
redhat
redhat
(RHSA-2013:1156) Moderate: httpd security update
2013-08-13 00:00:00
(RHSA-2013:1133) Moderate: httpd security update
2013-08-05 15:27:06
(RHSA-2013:1134) Moderate: httpd security update
2013-08-05 15:32:30
checkpoint_advisories
checkpoint_advisories
Apache HTTP Server mod_dav MERGE Request Denial of Service (CVE-2013-1896)
2013-09-01 00:00:00
Apache HTTP Server mod_dav MERGE Request Denial of Service - Ver2 (CVE-2013-1896)
2014-12-28 00:00:00
cisco
cisco
Apache HTTP Server MERGE Request Denial of Service Vulnerability
2013-07-11 17:33:19
oraclelinux
oraclelinux
httpd security update
2013-08-13 00:00:00
kaspersky
kaspersky
KLA10068 Multiple vulnerabilities in Apache httpd
2013-07-22 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2013-07-15 00:00:00
freebsd
freebsd
apache22 -- several vulnerabilities
2013-06-21 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2013-09-23 00:00:00
suse
suse
Security update for apache2 (important)
2014-09-02 21:04:17
hackerone
hackerone
Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)
2015-06-09 17:47:58
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.956 High

EPSS

Percentile

99.4%

JSON
Related for CA4D63FB-F15C-11E2-B183-20CF30E32F6D
nessus38openvas23fedora2mageia2slackware1securityvulns4httpd3nvd2veracode1cve2debiancve2f54ubuntucve2ibm6seebug2prion2cvelist2centos1redhat6checkpoint_advisories2cisco1oraclelinux1kaspersky1ubuntu1freebsd1gentoo1suse1hackerone2