CVE-2013-0966 | Vulnetix

CVE-2013-0966 PUBLISHED

Reported by apple · Published March 15, 2013

The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to bypass intended directory authentication requirements via a crafted pathname in a URI.

Affected products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	*

Timeline

Mar 15, 2013 CVE Published
Sep 6, 2015 PoC Published
Feb 4, 2022 EPSS Score (30 in total, the first dated here)
Apr 5, 2026 Security Advisory
Apr 29, 2026 CVE Updated
Oct 25, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2013-0966
vulnetix vdb fixes CVE-2013-0966

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2013-0966/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

APPLE-SA-2013-03-14-1 vendor-advisoryx_refsource_APPLE

Look up in the Resolve Platform →