CVE:CVE-2013-1896
CNNVD:CNNVD-201307-210
Apache HTTP Server是美国阿帕奇（Apache）软件基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache HTTP Server 2.2.25之前的版本中的mod_dav.c中存在安全漏洞，该漏洞源于程序没有正确确认对URI是否启用DAV。远程攻击者可借助配置URI处理mod_dav_svn模块的MERGE请求，利用该漏洞造成拒绝服务（分段故障）。
solution:Upgrade apache http_server to a higher version than 2.2.25,2.4.6,and avoid the version [2.2.0,2.2.25),[2.4.1,2.4.6); Upgrade redhat jboss_enterprise_application_platform to a higher version than 6.0.0,6.4.0,and avoid the version 6.0.0,6.4.0; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_eus to a higher version than 5.9,6.4,and avoid the version 5.9,6.4; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 5.9,6.4,and avoid the version 5.9,6.4; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,12.10,13.04,and avoid the version 10.04,12.04,12.10,13.04; Upgrade opensuse opensuse to a higher version than 11.4,12.2,12.3,and avoid the version 11.4,12.2,12.3