Lucene search
PRIOn knowledge basePRION:CVE-2013-5705HistoryApr 15, 2014 - 10:55 a.m.
Authentication flaw
2014-04-1510:55:00
PRIOn knowledge base
www.prio-n.com
3
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.008 Low
EPSS
Percentile
81.4%
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 7.0 | |
| modsecurity | lt | 2.7.6 |
Related
openvas
openvas
Debian Security Advisory DSA 2991-1 (modsecurity-apache - security update)
2014-07-27 00:00:00
Fedora Update for mod_security FEDORA-2014-4720
2014-04-15 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-334)
2015-09-08 00:00:00
nessus
nessus
Fedora 20 : mod_security-2.7.5-3.fc20 (2014-4633)
2014-04-15 00:00:00
Amazon Linux AMI : mod24_security (ALAS-2014-334)
2014-10-12 00:00:00
ModSecurity < 2.7.6 Chunked Header Filter Bypass
2014-05-12 00:00:00
securityvulns
securityvulns
Apache mod_security protection bypass
2014-05-10 00:00:00
[ MDVSA-2014:081 ] apache-mod_security
2014-05-10 00:00:00
debian
debian
[SECURITY] [DSA 2991-1] modsecurity-apache security update
2014-07-27 17:53:46
[DLA 34-1] libapache-mod-security security update
2014-08-09 13:56:43
[SECURITY] [DSA 2991-1] modsecurity-apache security update
2014-07-27 17:53:46
ubuntucve
ubuntucve
CVE-2013-5705
2014-04-15 00:00:00
cve
cve
CVE-2013-5705
2014-04-15 10:55:00
osv
osv
modsecurity-apache - security update
2014-07-27 00:00:00
debiancve
debiancve
CVE-2013-5705
2014-04-15 10:55:00
mageia
mageia
Updated apache-mod_security packages fix security vulnerability
2014-04-18 00:26:15
amazon
amazon
Medium: mod_security
2014-05-06 22:19:00
Medium: mod24_security
2014-05-06 22:19:00
seebug
seebug
ModSecurity HTTP请求分块编码安全限制绕过漏洞
2014-04-02 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: mod_security-2.7.5-3.fc19
2014-04-14 22:33:53
[SECURITY] Fedora 20 Update: mod_security-2.7.5-3.fc20
2014-04-14 22:41:25
checkpoint_advisories
checkpoint_advisories
suse
suse
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.008 Low
EPSS
Percentile
81.4%
Related for PRION:CVE-2013-5705