mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-28 11:21:40 +02:00
0xMarcio
34 lines
1.7 KiB
Markdown
34 lines
1.7 KiB
Markdown
### [CVE-2013-5704](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5704)
|
|
|
|
|
|
|
|
|
|
### Description
|
|
|
|
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
|
|
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
|
|
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
|
|
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
|
|
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
|
|
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246
|
|
|
|
#### Github
|
|
- https://github.com/8ctorres/SIND-Practicas
|
|
- https://github.com/ARPSyndicate/cvemon
|
|
- https://github.com/DButter/whitehat_public
|
|
- https://github.com/Dokukin1/Metasploitable
|
|
- https://github.com/Iknowmyname/Nmap-Scans-M2
|
|
- https://github.com/NikulinMS/13-01-hw
|
|
- https://github.com/Zhivarev/13-01-hw
|
|
- https://github.com/firatesatoglu/shodanSearch
|
|
- https://github.com/hrbrmstr/internetdb
|
|
- https://github.com/smabramov/Vulnerabilities-and-attacks-on-information-systems
|
|
- https://github.com/vshaliii/DC-1-Vulnhub-Walkthrough
|
|
- https://github.com/zzzWTF/db-13-01
|
|
|