CVE-2014-8567

Description

References

• linux.oracle.com/errata/ELSA-2014-1803.html · Third Party Advisory
• rhn.redhat.com/errata/RHSA-2014-1803.html · Third Party Advisory
• secunia.com/advisories/62094 · Permissions Required
• secunia.com/advisories/62125 · Permissions Required
• UNINETT/mod_auth_mellon commit 0f5b4fd · Third Party Advisory
• postlister.uninett.no/sympa/arc/modmellon/2014-11/msg00000.html · Vendor Advisory

Altre vulnerabilità di mod auth mellon

• CVE-2021-3639MEDIO 6.1A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate p…
• CVE-2017-6807MEDIO 6.1mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a s…
• CVE-2016-2146ALTO 7.5The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cau…
• CVE-2016-2145ALTO 7.5The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which a…
• CVE-2014-8566MEDIO 6.4The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation f…