Cross site request forgery (csrf)

🗓️ 18 Mar 2014 05:18:00Reported by PRIOn knowledge baseType

prion

prion🔗 www.prio-n.com👁 24 Views

Apache HTTP Server mod_dav module dav_xml_get_cdata function vulnerabilit

Reporter	Title	Published	Views	Family All 155
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.33	8 Sep 202200:26	–	ibm
IBM Security Bulletins	Security Bulletin: Network Intrusion Prevention System is affected by multiple Apache web server vulnerabilities (CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231)	23 Feb 202219:21	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.9	8 Sep 202200:26	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000, IBM Smart Analytics System 1050, and 2050 are affected by the following Apache Tomcat vulnerabilities: CVE-2014-0098 and CVE-2013-6438	16 Jun 201813:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache affect the IBM Flex System Manager (FSM): (CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.5.2	15 Jun 201806:59	–	ibm
Gitee	Exploit for CVE-2007-6750	27 Jul 202503:38	–	gitee
Tenable Nessus	Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	Apache HTTP Server < 2.4.8 Multiple Vulnerabilities	20 Mar 201400:00	–	nessus

Source	Link
svn	www.svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/util.c
apache	www.apache.org/dist/httpd/CHANGES_2.4.9
svn	www.svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/util.c
ubuntu	www.ubuntu.com/usn/USN-2152-1
securityfocus	www.securityfocus.com/bid/66303
secunia	www.secunia.com/advisories/59345
secunia	www.secunia.com/advisories/59315
oracle	www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
blogs	www.blogs.oracle.com/sunsecurity/entry/multiple_input_validation_vulnerabilities_in1
secunia	www.secunia.com/advisories/58230

07 Nov 2023 02:17Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.39561

cross site request forgery csrf apache http server mod_dav module dav_xml_get_cdata function denial of service daemon crash crafted dav write request