Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/03/25 9:31 p.m.2 views

CVE-2026-33248

A flaw was found in NATS-Server, a high-performance messaging system. When configured to use mutual Transport Layer Security mTLS for client identity, and specifically the verifyandmap feature, certain patterns within a client certificate's Subject Distinguished Name DN were not correctly enforce...

4.8CVSS5.6AI score0.00009EPSS
Exploits0References5
CVE
CVE
added 2026/03/25 8:18 p.m.4 views

CVE-2026-33248

The connected advisory for CVE-2026-33248 concerns NATS: an authentication bypass issue in mTLS verify_and_map where certain Subject DN patterns could bypass client identity verification. Affected product is NATS Server; impact is authentication bypass under specific DN patterns, requiring a vali...

4.2CVSS5.8AI score0.00009EPSS
Exploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2026/03/25 8:18 p.m.6 views

CVE-2026-33248

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using mTLS for client identity, with verifyandmap to derive a NATS identity from the client certificate's Subject DN, certain patterns of RDN would not be...

4.2CVSS5.8AI score0.00009EPSS
Exploits0
F5 Networks
F5 Networks
added 2023/02/21 6:26 p.m.38 views

K3631: Stack-based buffer overflow in Apache - CAN-2004-0488

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

7.5CVSS7.8AI score0.62663EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.27 views

Mageia: Security Advisory (MGASA-2014-0557)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS6.6AI score0.05595EPSS
Exploits1References7
OpenVAS
OpenVAS
added 2012/09/11 12:0 a.m.36 views

Slackware Advisory SSA:2004-154-01 mod_ssl

The remote host is missing an update as announced via advisory SSA:2004-154-01. OpenVAS Vulnerability Test $Id: esoftslkssa200415401.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

7.5CVSS1.1AI score0.62663EPSS
Exploits0
F5 Networks
F5 Networks
added 2009/10/27 12:0 a.m.54 views

SOL3631 - Stack-based buffer overflow in Apache - CAN-2004-0488

Vulnerability description and product information: Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code by way of a client certificate with a long...

7.5CVSS1.7AI score0.62663EPSS
Exploits0
OSV
OSV
added 2004/07/07 4:0 a.m.6 views

CVE-2004-0488

Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN...

6.9AI score
Exploits0References40
UbuntuCve
UbuntuCve
added 2004/07/07 4:0 a.m.29 views

CVE-2004-0488

Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN...

7.5CVSS6.6AI score0.62663EPSS
Exploits0References1
Rows per page
Query Builder