| Package | Affected versions | Patched versions |
|---|---|---|
| mod nss | = 1.0= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7≤ 1.0.8 |
mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free