CVE-2013-5704

Name of the Vulnerable Software and Affected Versions Apache HTTP Server version 2.2.22

Description The mod headers module in the Apache HTTP Server allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. The vendor states that this is not a security issue in httpd as such.

Recommendations For Apache HTTP Server version 2.2.22, consider disabling the mod headers module as a temporary workaround until a patch is available. Restrict access to the trailer portion of data sent with chunked transfer coding to minimize the risk of exploitation.