Red Hat Security AdvisoryRHSA-2013:1779
mod_nss security update
Released 2013-12-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) mod_nss-1.0.8-8.el5_10, mod_nss-1.0.8-8.el5_10.i386, mod_nss-1.0.8-8.el5_10.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) mod_nss-1.0.8-8.el5_10, mod_nss-1.0.8-8.el5_10.i386
- Red Hat Enterprise Linux Desktop Optional (v. 6) mod_nss-1.0.8-19.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) mod_nss-1.0.8-19.el6_5
- Red Hat Enterprise Linux Server (v. 6) mod_nss-1.0.8-19.el6_5
- Red Hat Enterprise Linux Workstation (v. 6) mod_nss-1.0.8-19.el6_5
Fixes 1 record
Priority LOW 23
mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.01949 · Published 2013-12-12 · Partial fix CWE-264
