CVE

Id
62196  
CVE No.
CVE-2013-2249  
Status
Candidate  
Description
mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
622161 62196 CVE-2013-2249 CONFIRM:http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/session/mod_session_dbd.c?r1=1409170&r2=1488158&diff_format=h  View
622162 62196 CVE-2013-2249 CONFIRM:http://www.apache.org/dist/httpd/CHANGES_2.4.6  View
622163 62196 CVE-2013-2249 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698  View
622164 62196 CVE-2013-2249 CONFIRM:https://httpd.apache.org/security/vulnerabilities_24.html  View
622165 62196 CVE-2013-2249 CISCO:20130822 Apache HTTP Server mod_session_dbd Save Operations Vulnerability  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23220 JVNDB-2013-004795 Apache Sling の org.apache.sling.servlets.post.bundle におけるサービス運用妨害 (DoS) の脆弱性 Apache Sling の org.apache.sling.servlets.post.bundle の impl/operations/AbstractCreateOperation.java 内の deepGetOrCreateNode 関数は、セッションがルートノードのパーミッションを持っていない場合に返す NULL 値を適切に処理しないため、サービス運用妨害 (無限ループ) 状態にされる脆弱性が存在します。 CVE-2013-2254 62196 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004795.html  View