CVE-2013-0966
15.03.2013, 20:55
The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to bypass intended directory authentication requirements via a crafted pathname in a URI.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | mac_os_x | 10.6.8 |
| apple | mac_os_x_server | 10.6.8 |
| apple | mac_os_x | 10.7.0 |
| apple | mac_os_x | 10.7.1 |
| apple | mac_os_x | 10.7.2 |
| apple | mac_os_x | 10.7.3 |
| apple | mac_os_x | 10.7.4 |
| apple | mac_os_x | 10.7.5 |
| apple | mac_os_x_server | 10.7.0 |
| apple | mac_os_x_server | 10.7.1 |
| apple | mac_os_x_server | 10.7.2 |
| apple | mac_os_x_server | 10.7.3 |
| apple | mac_os_x_server | 10.7.4 |
| apple | mac_os_x_server | 10.7.5 |
| apple | mac_os_x | 10.8.0 |
| apple | mac_os_x | 10.8.1 |
| apple | mac_os_x | 10.8.2 |
𝑥
= Vulnerable software versions