CVE-2014-8566

概要

参考情報

• linux.oracle.com/errata/ELSA-2014-1803.html
• rhn.redhat.com/errata/RHSA-2014-1803.html
• secunia.com/advisories/62094
• secunia.com/advisories/62125
• UNINETT/mod_auth_mellon release v0.8.1 · Patch
• postlister.uninett.no/sympa/arc/modmellon/2014-11/msg00000.html · Patch

mod auth mellon のその他の脆弱性

• CVE-2021-3639中 6.1A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate p…
• CVE-2017-6807中 6.1mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a s…
• CVE-2016-2146高 7.5The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cau…
• CVE-2016-2145高 7.5The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which a…
• CVE-2014-8567緊急 9.4The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout…