CVE-2016-2146

Mô tả

Tham khảo

• lists.fedoraproject.org/pipermail/package-announce/2016-March/179085.html
• UNINETT/mod_auth_mellon#71 · Patch
• sympa.uninett.no/lists/uninett.no/arc/modmellon/2016-03/msg00000.html

Lỗ hổng khác của mod auth mellon

• CVE-2021-3639TRUNG BÌNH 6.1A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate p…
• CVE-2017-6807TRUNG BÌNH 6.1mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a s…
• CVE-2016-2145CAO 7.5The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which a…
• CVE-2014-8566TRUNG BÌNH 6.4The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation f…
• CVE-2014-8567NGHIÊM TRỌNG 9.4The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout…