CVE-2013-1862
httpd: mod_rewrite allows terminal escape sequences to be written to the log file
Severity Score
Exploit Likelihood
Affected Versions
27Public Exploits
0Exploited in Wild
-Decision
Descriptions
mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.
mod_rewrite.c en el modulo mod_rewrite en Apache HTTP Server v2.2.x anterior a v2.2.25 escribe datos en un archivo de log sin eliminar caracteres no imprimibles, lo que podría permitir a un atacante remotos ejecutar comandos arbitrarios a través de una petición HTTP que contiene una secuencia de escape para un emulador de terminal.
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. A flaw was found in the way the mod_dav module of the Apache HTTP Server handled merge requests. An attacker could use this flaw to send a crafted merge request that contains URIs that are not configured for DAV, causing the httpd child process to crash.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2013-02-19 CVE Reserved
- 2013-06-10 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (44)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/55032 | Not Applicable | |
| http://support.apple.com/kb/HT6150 | Third Party Advisory |
|
| http://www-01.ibm.com/support/docview.wss?uid=swg21644047 | Third Party Advisory | |
| http://www.fujitsu.com/global/support/software/security/products-f/interstage-201303e.html | Third Party Advisory | |
| http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html | Third Party Advisory |
|
| http://www.securityfocus.com/bid/59826 | Third Party Advisory | |
| http://www.securityfocus.com/bid/64758 | Third Party Advisory | |
| https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.http... | Mailing List | |
| https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.http... | Mailing List | |
| https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.http... | Mailing List |
| URL | Date | SRC |
|---|