Lucene search

K
httpdApache Team FoundationHTTPD:3353898BFE39BBDF8391739FC2DDB5B1
HistorySep 06, 2013 - 12:00 a.m.

Apache Httpd < 2.4.12 : HTTP Trailers processing bypass

2013-09-0600:00:00
Apache Team Foundation
httpd.apache.org
78

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.467 Medium

EPSS

Percentile

97.4%

HTTP trailers could be used to replace HTTP headers late during request processing, potentially undoing or otherwise confusing modules that examined or modified request headers earlier. This fix adds the โ€œMergeTrailersโ€ directive to restore legacy behavior.

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.467 Medium

EPSS

Percentile

97.4%