Lucene search
HistoryDec 12, 2013 - 6:55 p.m.
CVE-2013-4566
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.3%
mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.
Affected configurations
Node
mod_nss_projectmod_nssRange≤1.0.8
ORmod_nss_projectmod_nssMatch1.0
ORmod_nss_projectmod_nssMatch1.0.2
ORmod_nss_projectmod_nssMatch1.0.3
ORmod_nss_projectmod_nssMatch1.0.4
ORmod_nss_projectmod_nssMatch1.0.5
ORmod_nss_projectmod_nssMatch1.0.6
ORmod_nss_projectmod_nssMatch1.0.7
Node
redhatenterprise_linuxMatch5
ORredhatenterprise_linuxMatch6.0
Related
oraclelinux
oraclelinux
mod_nss security update
2013-12-03 00:00:00
nessus
nessus
openSUSE Security Update : apache2-mod_nss (openSUSE-SU-2013:1956-1)
2014-06-13 00:00:00
Fedora 19 : mod_nss-1.0.8-27.fc19 (2013-22787)
2013-12-13 00:00:00
Amazon Linux AMI : mod_nss (ALAS-2013-253)
2014-02-04 00:00:00
openvas
openvas
CentOS Update for mod_nss CESA-2013:1779 centos5
2013-12-04 00:00:00
RedHat Update for mod_nss RHSA-2013:1779-01
2013-12-04 00:00:00
CentOS Update for mod_nss CESA-2013:1779 centos6
2013-12-04 00:00:00
amazon
amazon
Medium: mod_nss
2013-12-03 13:00:00
Medium: mod24_nss
2013-12-03 13:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: mod_nss-1.0.8-27.fc18
2013-12-13 05:05:02
[SECURITY] Fedora 19 Update: mod_nss-1.0.8-27.fc19
2013-12-13 05:03:58
[SECURITY] Fedora 20 Update: mod_nss-1.0.8-28.fc20
2013-12-14 03:03:31
ubuntucve
ubuntucve
CVE-2013-4566
2013-12-12 00:00:00
prion
prion
Design/Logic Flaw
2013-12-12 18:55:00
cvelist
cvelist
CVE-2013-4566
2013-12-12 18:00:00
redhat
redhat
(RHSA-2013:1779) Moderate: mod_nss security update
2013-12-03 00:00:00
debiancve
debiancve
CVE-2013-4566
2013-12-12 18:55:00
mageia
mageia
Updated apache-mod_nss package fixes CVE-2013-4566
2013-12-20 21:27:18
veracode
veracode
Authorization Bypass
2019-01-15 08:52:22
centos
centos
mod_nss security update
2013-12-03 22:51:46
cve
cve
CVE-2013-4566
2013-12-12 18:55:10
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.3%
Related for NVD:CVE-2013-4566