CVE-2013-5705
Fixed in a distro release EPSS 3%
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.
Products: trustwave modsecurity, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | modsecurity-apache | 2.7.7-1 |
| Debian 13 | modsecurity-apache | 2.7.7-1 |
| Debian 14 | modsecurity-apache | 2.7.7-1 |
| Debian 6.0 | libapache-mod-security | 2.5.12-1+squeeze4 |
| Debian 7 | modsecurity-apache | 2.6.6-6+deb7u2 |