CPANSA-Nginx-Perl-2013-4547-nginx: Nginx-Perl vulnerability
| Publisher | giterlizzi | Document category | csaf_security_advisory |
|---|---|---|---|
| Initial release date | 2013-11-23T00:00:00 | Engine | CSAF Perl Toolkit 0.26 |
| Current release date | 2013-11-23T00:00:00 | Build Date | |
| Current version | 1 | Status | final |
| CVSS v3.1 Base Score | Severity | ||
| Original language | Language | en | |
| Also referred to | |||
Vulnerability Description
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
Vulnerabilities
CVE-2013-4547
Vulnerability Descriptionnginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
| Weakness | CWE-116 : Improper Encoding or Escaping of Output |
|---|
Product status
Known affected
| Product | Score | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Nginx-Perl equal 1.1.9.1 |
|
giterlizzi
Namespace: https://github.com/giterlizzi/
gdt@cpan.org
References
- CPANSA-Nginx-Perl-2013-4547-nginx JSON self
https://raw.githubusercontent.com/giterlizzi/perl-CPANSA-CSAF/develop/csaf/white/2013/cpansa-nginx-perl-2013-4547-nginx.json - http://www.debian.org/security/2012/dsa-2802 external
http://www.debian.org/security/2012/dsa-2802 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00084.html external
http://lists.opensuse.org/opensuse-updates/2013-11/msg00084.html - http://secunia.com/advisories/55757 external
http://secunia.com/advisories/55757 - http://secunia.com/advisories/55825 external
http://secunia.com/advisories/55825 - http://secunia.com/advisories/55822 external
http://secunia.com/advisories/55822 - http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html external
http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00118.html external
http://lists.opensuse.org/opensuse-updates/2013-11/msg00118.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00119.html external
http://lists.opensuse.org/opensuse-updates/2013-11/msg00119.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00007.html external
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00007.html - CVE-2013-4547 (NVD) external
https://nvd.nist.gov/vuln/detail/CVE-2013-4547
Revision history
| Version | Date of the revision | Summary of the revision |
|---|---|---|
| 1 | Sat Nov 23 00:00:00 2013 | First release |
Sharing rules
TLP:WHITE
For the TLP version see: https://www.first.org/tlp/