CVE-2013-6438 in MacOS X

摘要 (英语)

The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

预定

2013-11-04

披露

2014-03-18

状态

已确认

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
74702	Apple MacOS X Apache 权限提升	20	未定义	官方修复	CVE-2013-6438
68667	Oracle HTTP Server Web Listener 权限提升	20	未定义	官方修复	CVE-2013-6438
67997	Apple Mac OS X 权限提升	20	未定义	官方修复	CVE-2013-6438
66689	Apache HTTP Server mod_dav dav_xml_get_cdata 权限提升	20	未定义	官方修复	CVE-2013-6438

来源

• MITRE
• NVD
• CVE Details