CVE:CVE-2013-1915
CNNVD:CNNVD-201304-125
ModSecurity是Trustwave's SpiderLabs团队开发的一款Web应用防火墙（WAF）。
ModSecurity 2.7.3之前的版本中存在漏洞。远程攻击者可通过XML外部实体声明和实体引用相结合利用该漏洞读取任意文件，发送HTTP请到intranet服务器或造成拒绝服务（CPU和内存耗尽），又名‘XML External Entity (XXE)漏洞’。
solution:Upgrade trustwave modsecurity to a higher version than 2.7.3,and avoid the version (,2.7.3); Upgrade opensuse opensuse to a higher version than 11.4,12.2,12.3,and avoid the version 11.4,12.2,12.3; Upgrade fedoraproject fedora to a higher version than 17,18,19,and avoid the version 17,18,19; Upgrade debian debian_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0