Lucene search

K
seebugRootSSV:60905
HistoryJul 17, 2013 - 12:00 a.m.

Apache HTTP Server mod_dav.c 拒绝服务漏洞(CVE-2013-1896)

2013-07-1700:00:00
Root
www.seebug.org
770

0.956 High

EPSS

Percentile

99.4%

CVE ID:CVE-2013-1896

Apache HTTP Server是一款流行的WEB服务器

Apache HTTP Server 2.2.25之前版本中的mod_dav.c没有正确判断URI是否启用DAV,允许远程攻击者提交URI由mod_dav_svn模块处理,但XML数据中的某些href属性引用非DAV URI的MERGET请求,可使服务程序触发段错误而崩溃
0
Apache HTTP Server < 2.2.25
http://www.apache.org/dist/httpd/Announcement2.2.html
http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/mod_dav.c?view=log
http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/mod_dav.c?r1=1482522&amp;r2=1485668&amp;diff_format=h