CVE-2013-5704 in Apple MacOS X

Resumen (Inglés)

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

Reservar

2013-09-05

Divulgación

2014-04-15

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
74701	Apple MacOS X Apache escalada de privilegios	264	No está definido	Arreglo oficial	CVE-2013-5704
68668	Oracle HTTP Server Web Listener escalada de privilegios	264	No está definido	Arreglo oficial	CVE-2013-5704
12741	Trustwave ModSecurity Chunked HTTP Transfer modsecurity.c modsecurity_tx_init escalada de privilegios	264	Prueba de concepto	Arreglo oficial	CVE-2013-5704