VDB

GCVE-110-MAGEIA-2014-180

GCVE-110-MAGEIA-2014-180
Advisory Published
Vulnetix · Advisory published April 17, 2014
Updated apache-mod_security packages fix security vulnerability: Martin Holst Swende discovered a flaw in the way mod_security handled chunked requests. A remote attacker could use this flaw to bypass intended mod_security restrictions, allowing them to send requests containing content that should have been removed by mod_security (CVE-2013-5705).

Affected Products

VendorProductVersionsPlatforms
Mageiaapache-mod_security0 (affected), 2.7.4-1.1.mga3 (unaffected)—
Mageiaapache-mod_security0 (affected), 2.7.5-2.1.mga4 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›