NVD

Id
38004  
Name
CVE-2013-1862  
Description
mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-06-10  
Modified Date
2017-01-06  
Seq
2013-1862  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194132 38004 CVE-2013-1862 openSUSE-SU-2013:1337  View
194133 38004 CVE-2013-1862 openSUSE-SU-2013:1340  View
194134 38004 CVE-2013-1862 openSUSE-SU-2013:1341  View
194135 38004 CVE-2013-1862 oval:org.mitre.oval:def:18790  View
194136 38004 CVE-2013-1862 oval:org.mitre.oval:def:19534  View
194137 38004 CVE-2013-1862 http://people.apache.org/~jorton/mod_rewrite-CVE-2013-1862.patch  View
194138 38004 CVE-2013-1862 RHSA-2013:0815  View
194139 38004 CVE-2013-1862 RHSA-2013:1207  View
194140 38004 CVE-2013-1862 RHSA-2013:1208  View
194141 38004 CVE-2013-1862 RHSA-2013:1209  View
194142 38004 CVE-2013-1862 http://support.apple.com/kb/HT6150  View
194143 38004 CVE-2013-1862 http://svn.apache.org/viewvc?view=revision&revision=r1469311  View
194144 38004 CVE-2013-1862 20130822 Apache HTTP Server mod_rewrite Log File Manipulation Vulnerability  View
194145 38004 CVE-2013-1862 http://www-01.ibm.com/support/docview.wss?uid=swg21644047  View
194146 38004 CVE-2013-1862 http://www.fujitsu.com/global/support/software/security/products-f/interstage-201303e.html  View
194147 38004 CVE-2013-1862 MDVSA-2013:174  View
194148 38004 CVE-2013-1862 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html  View
194149 38004 CVE-2013-1862 59826  View
194150 38004 CVE-2013-1862 64758  View
194151 38004 CVE-2013-1862 USN-1903-1  View
194152 38004 CVE-2013-1862 https://bugzilla.redhat.com/show_bug.cgi?id=953729  View
194153 38004 CVE-2013-1862 SSRT101288  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21373 JVNDB-2013-002948 Apache HTTP Server の mod_rewrite モジュールにおける任意のコマンドを実行される脆弱性 Apache HTTP Server の mod_rewrite モジュールの mod_rewrite.c は、非印字可能文字 (non-printable character) をサニタイジングせずにログファイルにデータを書き込みするため、任意のコマンドを実行される脆弱性が存在します。 CVE-2013-1862 61804 CVE-2013-1862 38004 5.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002948.html 2013-04-18 2016-08-02 View