Lucene search

K
httpdApache Team FoundationHTTPD:96CCBB8B74890DC94A45CD0955D35015
HistoryMar 13, 2013 - 12:00 a.m.

Apache Httpd < 2.2.25 : mod_rewrite log escape filtering

2013-03-1300:00:00
Apache Team Foundation
httpd.apache.org
16

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.383 Low

EPSS

Percentile

97.2%

mod_rewrite does not filter terminal escape sequences from logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.383 Low

EPSS

Percentile

97.2%