UpHeron
All vulnerabilities

Servers and applications

CVE-2013-1862

mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.

Severity
Medium 5.1
Published
10 Jun 2013
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Fixed in
2.0.65, 2.2.25
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • From 2.0.0 before 2.0.65
  • From 2.2.0 before 2.2.25

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-1862
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-1862