CVE-2011-2329

2011-05-2600:00:00

ubuntu.com

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

56.1%

JSON

The rampart_timestamp_token_validate function in
util/rampart_timestamp_token.c in Apache Rampart/C 1.3.0 does not properly
calculate the expiration of timestamp tokens, which allows remote attackers
to bypass intended access restrictions by leveraging an expired token, a
different vulnerability than CVE-2011-0730.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchrampart< 1.3.0-0ubuntu7.1UNKNOWN
ubuntu10.10noarchrampart< 1.3.0-1ubuntu1.1UNKNOWN
ubuntu11.04noarchrampart< 1.3.0-1ubuntu2.1UNKNOWN