CVE-2013-4547
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
F5 Nginx是美国F5公司的一款轻量级Web服务器/反向代理服务器及电子邮件（IMAP/POP3）代理服务器，在BSD-like协议下发行。 F5 Nginx 0.8.41版本至1.4.3版本、1.5.x版本至1.5.7之前版本存在权限许可和访问控制问题漏洞。攻击者利用该漏洞通过URI中的未转义空格字符绕过预期限制。
Public Exploits 1
ExploitDB · 1
EDB-38846 [remote]
Possible ATT&CK Techniques 1 AI
T1598 · Phishing for Information
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2013-4547
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
F5 Nginx 权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
F5 Nginx是美国F5公司的一款轻量级Web服务器/反向代理服务器及电子邮件（IMAP/POP3）代理服务器，在BSD-like协议下发行。 F5 Nginx 0.8.41版本至1.4.3版本、1.5.x版本至1.5.7之前版本存在权限许可和访问控制问题漏洞。攻击者利用该漏洞通过URI中的未转义空格字符绕过预期限制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2013-4547
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/cyberharsh/Nginx-CVE-2013-4547 | POC Details |
| 2 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E4%B8%AD%E9%97%B4%E4%BB%B6%E6%BC%8F%E6%B4%9E/Nginx%20%E6%96%87%E4%BB%B6%E5%90%8D%E9%80%BB%E8%BE%91%E6%BC%8F%E6%B4%9E%20CVE-2013-4547.md | POC Details |
| 3 | https://github.com/vulhub/vulhub/blob/master/nginx/CVE-2013-4547/README.md | POC Details | |
| 4 | None | https://github.com/rsp243/fix_nginx_CVE-2013-4547_IB | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-4547
请登录查看更多情报信息。
Vendor Advisories for CVE-2013-4547 (4)
Mailing List Discussions for CVE-2013-4547 (4)
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00007.html vendor-advisory x_refsource_SUSE
-
-
-
Other References for CVE-2013-4547 (1)
Same Patch Batch · n/a · 2013-11-23 · 60 CVEs total
| CVE-2013-0867 | FFmpeg libavcodec/h264.c ‘decode_slice_header()’函数安全漏洞 | |
| CVE-2013-4509 | IBus 本地密码信息泄露漏洞 | |
| CVE-2013-6867 | SAP Sybase Adaptive Server Enterprise 安全漏洞 | |
| CVE-2013-6866 | SAP Sybase Adaptive Server Enterprise 安全漏洞 | |
| CVE-2013-6865 | SAP Sybase Adaptive Server Enterprise 安全漏洞 | |
| CVE-2013-6868 | SAP Sybase Adaptive Server Enterprise 安全漏洞 | |
| CVE-2013-2561 | OpenFabrics ibutils 不安全临时文件漏洞 | |
| CVE-2013-1058 | Ubuntu MAAS Server 中间人攻击漏洞 | |
| CVE-2013-0869 | FFmpeg libavcodec/h264.c ‘field_end()’函数安全漏洞 | |
| CVE-2013-0868 | FFmpeg libavcodec/huffyuvdec.c文件整数溢出漏洞 | |
| CVE-2013-4459 | LightDM ‘create_guest_session()’函数安全绕过漏洞 | |
| CVE-2013-0866 | FFmpeg libavcodec/aacdec.c ‘aac_decode_init()’函数边界错误漏洞 | |
| CVE-2013-0865 | FFmpeg libavcodec/vqavideo.c ‘vqa_decode_chunk()’函数边界错误漏洞 | |
| CVE-2013-0864 | FFmpeg libavcodec/gifdec.c ‘gif_copy_img_rect()’函数拒绝服务漏洞 | |
| CVE-2013-0863 | FFmpeg libavcodec/sanm.c ‘rle_decode’函数缓冲区溢出漏洞 | |
| CVE-2013-0862 | FFmpeg ‘ibavcodec/sanm.c process_frame_obj()’函数整数溢出漏洞 | |
| CVE-2013-0861 | FFmpeg ‘avcodec_decode_audio4’函数拒绝服务漏洞 | |
| CVE-2013-0860 | FFmpeg ‘ff_er_frame_end’函数拒绝服务漏洞 | |
| CVE-2013-0223 | GNU coreutils 缓冲区错误漏洞 | |
| CVE-2013-0222 | GNU coreutils 缓冲区错误漏洞 |
Showing top 20 of 60 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2013-4547
No comments yet