Check Point Advisories

Preemptive Protection against Nginx Request URI Verification Security Bypass (CVE-2013-4547)

Check Point Reference:	CPAI-2013-3618
Date Published:	10 Dec 2013
Severity:	High
Last Updated:	Tuesday 01 January, 2013
Source:	CVE-2013-4547
Protection Provided by:
Who is Vulnerable?	nginx HTTP Server 1.5.x prior to 1.5.7 nginx HTTP Server 1.x prior 1.4.4
Vulnerability Description	A security bypass vulnerability has been reported in Nginx.
Vulnerability Details	The vulnerability is caused by improper handling of unescaped space characters within URIs.A remote attacker can exploit this vulnerability to bypass security restrictions in certain configurations.