CVE-2015-3277

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-November/170607.html · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

mod nss のその他の脆弱性

• CVE-2011-4973緊急 9.8Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certifica…
• CVE-2015-5244緊急 9.8The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions.
• CVE-2013-4566中 4.0mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in…