CVE-2013-5704 in Apple MacOS X

Summary

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

Reservation

09/05/2013

Disclosure

04/15/2014

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
74701	Apple MacOS X Apache access control	264	Not defined	Official fix	CVE-2013-5704
68668	Oracle HTTP Server Web Listener access control	264	Not defined	Official fix	CVE-2013-5704
12741	Trustwave ModSecurity Chunked HTTP Transfer modsecurity.c modsecurity_tx_init access control	264	Proof-of-Concept	Official fix	CVE-2013-5704