Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-2249
HistoryJul 23, 2013 - 12:00 a.m.

CVE-2013-2249

2013-07-2300:00:00
ubuntu.com
ubuntu.com
39

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.2%

mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server
before 2.4.5 proceeds with save operations for a session without
considering the dirty flag and the requirement for a new session ID, which
has unspecified impact and remote attack vectors.

Notes

Author Note
mdeslaur only affects 2.4.x

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.2%