FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

apache22 -- several vulnerabilities

Affected packages
2.2.0 < apache22 < 2.2.25
2.2.0 < apache22-event-mpm < 2.2.25
2.2.0 < apache22-itk-mpm < 2.2.25
2.2.0 < apache22-peruser-mpm < 2.2.25
2.2.0 < apache22-worker-mpm < 2.2.25

Details

VuXML ID f3d24aee-e5ad-11e2-b183-20cf30e32f6d
Discovery 2013-06-21
Entry 2013-07-05
Modified 2013-07-10

Apache HTTP SERVER PROJECT reports:

The mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.

mod_dav: Sending a MERGE request against a URI handled by mod_dav_svn with the source href (sent as part of the request body as XML) pointing to a URI that is not configured for DAV will trigger a segfault.

[source]

References

CVE Name CVE-2013-1862
CVE Name CVE-2013-1896

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.