PT-2013-5077 · Red Hat+2 · Mod Nss+3
Publicado
2013-12-03
·
Atualizado
2024-06-15
·
CVE-2013-4566
CVSS v2.0
4.0
Média
| Vetor | AV:N/AC:H/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
mod nss versions 1.0.8 and earlier
Description
The issue allows remote attackers to bypass intended access restrictions when NSSVerifyClient is set to none for the server/vhost context, and the setting is not enforced in the directory context.
Recommendations
For mod nss versions 1.0.8 and earlier, consider updating the configuration to enforce the NSSVerifyClient setting in the directory context to prevent bypassing of access restrictions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Red Hat
Suse
Mod Nss