Apache » Http Server : Security Vulnerabilities, CVEs, Published In July 2013
mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors.
Max CVSS
7.5
EPSS Score
1.22%
Published
2013-07-23
Updated
2022-09-14
mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which the URI is configured for handling by the mod_dav_svn module, but a certain href attribute in XML data refers to a non-DAV URI.
Max CVSS
4.3
EPSS Score
95.82%
Published
2013-07-10
Updated
2023-02-13
2 vulnerabilities found