The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T17:22:30.114Z
Reserved: 2013-09-05T00:00:00
Link: CVE-2013-5704

No data.

Status : Modified
Published: 2014-04-15T10:55:11.150
Modified: 2024-11-21T01:57:58.313
Link: CVE-2013-5704
