Description

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

Remediation

References

CVE-2013-5704

Related Vulnerabilities

Joomla! Core 2.5.x Clickjacking Vulnerability (2.5.0 - 2.5.7)

WordPress Plugin Total Security Multiple Unspecified Vulnerabilities (3.4.1)

Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-12525)

WordPress Plugin WordPress Photo Gallery by Gallery Bank SQL Injection (3.0.101)

WordPress Plugin VN-Calendar Multiple Cross-Site Scripting Vulnerabilities (1.0)

Severity

Medium

Classification

CVE-2013-5704

Tags

Missing Update Known Vulnerabilities