CVE-2011-4973 Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.
CriticalCVSS 9.8
EPSS 1.00%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mod nss project mod nss | = 1.0.8 | No fix listed |
References
- bugzilla.redhat.com issue-tracking third-party-advisory
- [Mod_nss-list] 20110504 Problem 2 issue-tracking mailing-list third-party-advisory