CVE-2014-8567

概要

参考情報

• linux.oracle.com/errata/ELSA-2014-1803.html · Third Party Advisory
• rhn.redhat.com/errata/RHSA-2014-1803.html · Third Party Advisory
• secunia.com/advisories/62094 · Permissions Required
• secunia.com/advisories/62125 · Permissions Required
• UNINETT/mod_auth_mellon commit 0f5b4fd · Third Party Advisory
• postlister.uninett.no/sympa/arc/modmellon/2014-11/msg00000.html · Vendor Advisory

mod auth mellon のその他の脆弱性

• CVE-2021-3639中 6.1A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate p…
• CVE-2017-6807中 6.1mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a s…
• CVE-2016-2146高 7.5The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows remote attackers to cau…
• CVE-2016-2145高 7.5The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which a…
• CVE-2014-8566中 6.4The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation f…