CVE-2013-5705 in Trustwave ModSecurity

Résumé (Anglaise)

apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.

Réserver

05/09/2013

Divulgation

15/04/2014

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
12742	Trustwave ModSecurity Chunk Extension modsecurity.c modsecurity_tx_init élévation de privilèges	264	Preuve de concept	Correctif officiel	CVE-2013-5705