CVE-2016-2146

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2016-March/179085.html
• UNINETT/mod_auth_mellon#71 · Patch
• sympa.uninett.no/lists/uninett.no/arc/modmellon/2016-03/msg00000.html

mod auth mellon のその他の脆弱性

• CVE-2021-3639中 6.1A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate p…
• CVE-2017-6807中 6.1mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a s…
• CVE-2016-2145高 7.5The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which a…
• CVE-2014-8566中 6.4The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation f…
• CVE-2014-8567緊急 9.4The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout…