CVE

Id
62712  
CVE No.
CVE-2013-2765  
Status
Candidate  
Description
The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.  
Phase
Assigned (20130407)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
626093 62712 CVE-2013-2765 BUGTRAQ:20130528 [SECURITY][CVE-2013-2765][ModSecurity] Remote Null Pointer Dereference  View
626094 62712 CVE-2013-2765 URL:http://archives.neohapsis.com/archives/bugtraq/2013-05/0125.html  View
626095 62712 CVE-2013-2765 MLIST:[mod-security-users] 20130527 Availability of ModSecurity 2.7.4 Stable Release  View
626096 62712 CVE-2013-2765 URL:http://sourceforge.net/mailarchive/message.php?msg_id=30900019  View
626097 62712 CVE-2013-2765 MISC:http://www.shookalabs.com/  View
626098 62712 CVE-2013-2765 MISC:https://github.com/shookalabs/exploits/blob/master/modsecurity_cve_2013_2765_check.py  View
626099 62712 CVE-2013-2765 MISC:https://github.com/SpiderLabs/ModSecurity/commit/0840b13612a0b7ef1ce7441cf811dcfc6b463fba  View
626100 62712 CVE-2013-2765 CONFIRM:http://www.modsecurity.org/  View
626101 62712 CVE-2013-2765 CONFIRM:https://raw.github.com/SpiderLabs/ModSecurity/master/CHANGES  View
626102 62712 CVE-2013-2765 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=967615  View
626103 62712 CVE-2013-2765 SUSE:openSUSE-SU-2013:1331  View
626104 62712 CVE-2013-2765 URL:http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html  View
626105 62712 CVE-2013-2765 SUSE:openSUSE-SU-2013:1336  View
626106 62712 CVE-2013-2765 URL:http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html  View
626107 62712 CVE-2013-2765 SUSE:openSUSE-SU-2013:1342  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20585 JVNDB-2013-002160 Mac OS X 上で稼働する Novell OES 用 Novell Kanaka コンポーネントにおけるサーバになりすまされる脆弱性 Mac OS X 上で稼働する Novell Open Enterprise Server (OES) 用 Novell Kanaka コンポーネントのインストレーション機能は、SSL 接続の際、サーバの X.509 証明書を検証しないため、サーバになりすまされる脆弱性が存在します。 CVE-2013-2770 62712 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002160.html  View