NVD

Id
40952  
Name
CVE-2013-5704  
Description
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-04-15  
Modified Date
2017-01-06  
Seq
2013-5704  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206969 40952 CVE-2013-5704 APPLE-SA-2015-04-08-2  View
206970 40952 CVE-2013-5704 APPLE-SA-2015-09-16-4  View
206971 40952 CVE-2013-5704 [dev] 20140401 CVE-2013-5704, mod_headers and chunked trailer fields  View
206972 40952 CVE-2013-5704 SSRT102066  View
206973 40952 CVE-2013-5704 SSRT102254  View
206974 40952 CVE-2013-5704 http://martin.swende.se/blog/HTTPChunked.html  View
206975 40952 CVE-2013-5704 RHSA-2015:0325  View
206976 40952 CVE-2013-5704 RHSA-2015:1249  View
206977 40952 CVE-2013-5704 RHSA-2015:2661  View
206978 40952 CVE-2013-5704 RHSA-2016:0061  View
206979 40952 CVE-2013-5704 RHSA-2016:0062  View
206980 40952 CVE-2013-5704 http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES  View
206981 40952 CVE-2013-5704 http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c  View
206982 40952 CVE-2013-5704 http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=1610674&r2=1610814&diff_format=h  View
206983 40952 CVE-2013-5704 MDVSA-2014:174  View
206984 40952 CVE-2013-5704 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
206985 40952 CVE-2013-5704 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
206986 40952 CVE-2013-5704 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
206987 40952 CVE-2013-5704 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
206988 40952 CVE-2013-5704 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
206989 40952 CVE-2013-5704 66550  View
206990 40952 CVE-2013-5704 USN-2523-1  View
206991 40952 CVE-2013-5704 RHSA-2015:2659  View
206992 40952 CVE-2013-5704 RHSA-2015:2660  View
206993 40952 CVE-2013-5704 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246  View
206994 40952 CVE-2013-5704 https://httpd.apache.org/security/vulnerabilities_24.html  View
206995 40952 CVE-2013-5704 GLSA-201504-03  View
206996 40952 CVE-2013-5704 https://support.apple.com/HT204659  View
206997 40952 CVE-2013-5704 https://support.apple.com/HT205219  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24746 JVNDB-2013-006321 Apache HTTP Server の mod_headers モジュールにおけるディレクティブを回避される脆弱性 Apache HTTP Server の mod_headers モジュールには、"RequestHeader unset" ディレクティブを回避される脆弱性が存在します。 CVE-2013-5704 65646 CVE-2013-5704 40952 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006321.html 2013-09-05 2016-01-29 View