6.4
CVSSv2

CVE-2013-0966

Published: 15/03/2013 Updated: 18/03/2013
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X prior to 10.8.3 does not properly handle ignorable Unicode characters, which allows remote malicious users to bypass intended directory authentication requirements via a crafted pathname in a URI.

Vulnerable Product Search on Vulmon Subscribe to Product

apple mac os x 10.6.8

apple mac os x server 10.6.8

apple mac os x server 10.7.2

apple mac os x 10.7.5

apple mac os x 10.7.4

apple mac os x server 10.7.4

apple mac os x 10.7.1

apple mac os x 10.7.0

apple mac os x server 10.7.0

apple mac os x 10.7.3

apple mac os x server 10.7.1

apple mac os x server 10.7.5

apple mac os x server 10.7.3

apple mac os x 10.7.2

apple mac os x 10.8.0

apple mac os x 10.8.1

apple mac os x 10.8.2