NetSight
IP …
medium5.1

CVE-2013-1862

mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, wh…

Impact

mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.

Affected products

VendorProductAffected versions
ApacheHttp Server
from 2.0.0 before 2.0.65
from 2.2.0 before 2.2.25
RedhatJboss Enterprise Application Platform
Versions 6.0.0, 6.4.0
OracleHttp Server
Versions 10.1.3.5.0, 11.1.1.7.0, 12.1.2.0, 12.1.3.0
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Versions 5.9, 6.4
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Aus
Versions 5.9, 6.4
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.04
OpensuseOpensuse
Versions 11.4, 12.2, 12.3

References