CVE-2013-4566

Published: Dec 12, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Exploitability: 4.9 / Impact: 4.9

Source: NVD

Description

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.

Affected (10)

Products: Mod Nss Project: Mod Nss · Redhat: Enterprise Linux

1 product

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Mod Nss Project Mod Nss	Up to 1.0.8
Mod Nss Project Mod Nss	Version 1.0.2
Mod Nss Project Mod Nss	Version 1.0.3
Mod Nss Project Mod Nss	Version 1.0.4
Mod Nss Project Mod Nss	Version 1.0.5
Mod Nss Project Mod Nss	Version 1.0.6
Mod Nss Project Mod Nss	Version 1.0.7
Mod Nss Project Mod Nss	Version 1.0