NVD

Id
38032  
Name
CVE-2013-1896  
Description
mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which the URI is configured for handling by the mod_dav_svn module, but a certain href attribute in XML data refers to a non-DAV URI.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-07-10  
Modified Date
2017-01-06  
Seq
2013-1896  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194266 38032 CVE-2013-1896 openSUSE-SU-2013:1337  View
194267 38032 CVE-2013-1896 openSUSE-SU-2013:1340  View
194268 38032 CVE-2013-1896 openSUSE-SU-2013:1341  View
194269 38032 CVE-2013-1896 oval:org.mitre.oval:def:18835  View
194270 38032 CVE-2013-1896 oval:org.mitre.oval:def:19747  View
194271 38032 CVE-2013-1896 RHSA-2013:1156  View
194272 38032 CVE-2013-1896 RHSA-2013:1207  View
194273 38032 CVE-2013-1896 RHSA-2013:1208  View
194274 38032 CVE-2013-1896 RHSA-2013:1209  View
194275 38032 CVE-2013-1896 http://support.apple.com/kb/HT6150  View
194276 38032 CVE-2013-1896 http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/mod_dav.c?r1=1482522&r2=1485668&diff_format=h  View
194277 38032 CVE-2013-1896 http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/mod_dav.c?view=log  View
194278 38032 CVE-2013-1896 20130822 Apache HTTP Server MERGE Request Denial of Service Vulnerability  View
194279 38032 CVE-2013-1896 http://www-01.ibm.com/support/docview.wss?uid=swg21644047  View
194280 38032 CVE-2013-1896 http://www.apache.org/dist/httpd/Announcement2.2.html  View
194281 38032 CVE-2013-1896 61129  View
194282 38032 CVE-2013-1896 USN-1903-1  View
194283 38032 CVE-2013-1896 SSRT101288  View
194284 38032 CVE-2013-1896 https://httpd.apache.org/security/vulnerabilities_24.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21745 JVNDB-2013-003320 Apache HTTP Server の mod_dav.c におけるサービス運用妨害 (DoS) の脆弱性 Apache HTTP Server の mod_dav.c は、URI 用に DAV が有効であるかを適切に判断しないため、サービス運用妨害 (セグメンテーション違反) 状態にされる脆弱性が存在します。 CVE-2013-1896 61838 CVE-2013-1896 38032 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003320.html 2013-07-10 2015-03-26 View