CVE-2013-4566 in Enterprise Linux

Resumen (Inglés)

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2013-06-12

Divulgación

2013-12-12

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
65734	Red Hat Enterprise Linux mod_nss escalada de privilegios	264	No está definido	No está definido	CVE-2013-4566

Fuentes

• MITRE
• NVD
• CVE Details