CVE

Id
67348  
CVE No.
CVE-2013-7401  
Status
Candidate  
Description
The parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service (crash) via a URI without a " " or "?" character in an ICAP request, as demonstrated by use of the OPTIONS method.  
Phase
Assigned (20140915)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
649535 67348 CVE-2013-7401 MLIST:[oss-security] 20140915 Re: CVE assignment for c-icap Server  View
649536 67348 CVE-2013-7401 URL:http://openwall.com/lists/oss-security/2014/09/15/6  View
649537 67348 CVE-2013-7401 MISC:http://osvdb.org/ref/89/c-icap.txt  View
649538 67348 CVE-2013-7401 CONFIRM:http://sourceforge.net/p/c-icap/code/1018/  View
649539 67348 CVE-2013-7401 CONFIRM:http://advisories.mageia.org/MGASA-2014-0530.html  View
649540 67348 CVE-2013-7401 GENTOO:GLSA-201409-07  View
649541 67348 CVE-2013-7401 URL:http://security.gentoo.org/glsa/glsa-201409-07.xml  View
649542 67348 CVE-2013-7401 MANDRIVA:MDVSA-2015:001  View
649543 67348 CVE-2013-7401 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:001  View
649544 67348 CVE-2013-7401 OSVDB:89304  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25087 JVNDB-2013-006664 Drupal 用 MRBS モジュールにおける SQL インジェクションの脆弱性 Drupal 用 MRBS モジュールには、SQL インジェクションの脆弱性が存在します。 CVE-2013-7406 67348 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006664.html  View