Launchpad.net

CVE 2013-4547

nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.

CVE-2013-4547 (Candidate) is related to these bugs:

Bug #1253691: Specially crafted request URI permits security restriction bypass [CVE-2013-4547]

		In	Importance	Status
1253691	Specially crafted request URI permits security restriction bypass [CVE-2013-4547]	nginx (Ubuntu)	High	Fix Released
1253691	Specially crafted request URI permits security restriction bypass [CVE-2013-4547]	nginx (Debian)	Unknown	Fix Released
1253691	Specially crafted request URI permits security restriction bypass [CVE-2013-4547]	nginx (Ubuntu Precise)	High	Fix Released
1253691	Specially crafted request URI permits security restriction bypass [CVE-2013-4547]	nginx (Ubuntu Quantal)	High	Fix Released
1253691	Specially crafted request URI permits security restriction bypass [CVE-2013-4547]	nginx (Ubuntu Raring)	High	Fix Released
1253691	Specially crafted request URI permits security restriction bypass [CVE-2013-4547]	nginx (Ubuntu Saucy)	High	Fix Released
1253691	Specially crafted request URI permits security restriction bypass [CVE-2013-4547]	nginx (Ubuntu Trusty)	High	Fix Released

Bug #1262710: [MIR] nginx

Summary				In	Importance	Status
	1262710	[MIR] nginx		nginx (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.