VDB
GCVE-110-MAGEIA-2013-381
GCVE-110-MAGEIA-2013-381
Advisory Published
Updated apache-mod_nss package fixes security vulnerability:
A flaw was found in the way mod_nss handled the NSSVerifyClient setting for
the per-directory context. When configured to not require a client
certificate for the initial connection and only require it for a specific
directory, mod_nss failed to enforce this requirement and allowed a client
to access the directory when no valid client certificate was provided
(CVE-2013-4566).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | apache-mod_nss | 0 (affected), 1.0.8-16.4.mga3 (unaffected) | — |
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.