Mod Nss Project Mod Nss vulnerabilities

4 known vulnerabilities affecting mod_nss_project/mod_nss.

Total CVEs

4

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL2HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2011-4973CRITICALCVSS 9.8v1.0.82018-02-15

CVE-2011-4973 [CRITICAL] CWE-287 CVE-2011-4973: Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.

CVE-2015-3277HIGHCVSS 7.5≤ 1.0.102017-08-09

CVE-2015-3277 [HIGH] CWE-200 CVE-2015-3277: The mod_nss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to inc The mod_nss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to incorrect parsing of multi-keyword cipherstring.

CVE-2015-5244CRITICALCVSS 9.8≤ 1.0.112017-08-07

CVE-2015-5244 [CRITICAL] CWE-264 CVE-2015-5244: The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.

CVE-2013-4566MEDIUMCVSS 4.0≤ 1.0.8v1.0+6 more2013-12-12

CVE-2013-4566 [MEDIUM] CWE-264 CVE-2013-4566: mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does no mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.