CVE-2013-4547 nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
HighCVSS 7.5
EPSS 68.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/nginx(Debian:12) | < 1.4.4-1 | 1.4.4-1 |
| debian/nginx(Debian:13) | < 1.4.4-1 | 1.4.4-1 |
| debian/nginx(Debian:14) | < 1.4.4-1 | 1.4.4-1 |
| f5 nginx | >= 0.8.41, < 1.4.4 | 1.4.4 |
| f5 nginx | >= 1.5.0, <= 1.5.6 | No fix listed |
| SUSE lifecycle management server | = 1.3 | No fix listed |
| SUSE studio onsite | = 1.3 | No fix listed |
| SUSE webyast | = 1.3 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.2 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| opensuse | = 13.1 | No fix listed |
References
- Debian Security Tracker CVE-2013-4547 vendor-advisory
- bugs.debian.org issue-tracking
- SUSE-SU-2013:1895 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:1745 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:1791 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:1792 mailing-list third-party-advisory vendor-advisory
- [nginx-announce] 20131119 nginx security advisory (CVE-2013-4547) mailing-list mitigation vendor-advisory
- 55757 third-party-advisory
- 55822 third-party-advisory
- 55825 third-party-advisory
- DSA-2802 broken-link vendor-advisory