Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
mod_nss 权限许可和访问控制漏洞
Vulnerability Description
mod_nss是一个为Apache HTTP服务器提供加密功能的模块，它基于安全套接字层（SSL）和传输层安全（TLS）协议，并使用Network Security Services（NSS）安全库提供加密功能。 mod_nss 1.0.8及之前的版本中存在权限许可和访问控制漏洞，该漏洞源于程序处理NSSVerifyClient配置设置存在错误。当NSSVerifyClient设置为‘none’时，远程攻击者可利用该漏洞绕过既定的访问限制，获取其他限制目录的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A