CVE-2013-5705 in Trustwave ModSecurity

Resumen (Inglés)

apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.

Reservar

2013-09-05

Divulgación

2014-04-15

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
12742	Trustwave ModSecurity Chunk Extension modsecurity.c modsecurity_tx_init escalada de privilegios	264	Prueba de concepto	Arreglo oficial	CVE-2013-5705