CVE-2015-3675 The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the mod_hfs_apple module, which allows remote attackers to bypass HTTP authentication via a crafted URL...
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the mod_hfs_apple module, which allows remote attackers to bypass HTTP authentication via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x | <= 10.10.3 | No fix listed |
References
- APPLE-SA-2015-06-30-2 patch vendor-advisory
- support.apple.com vendor-advisory
- 75493 vdb-entry
- 1032760 vdb-entry
- Debian Security Tracker CVE-2015-3675 vendor-advisory