Vulnerability-Lookup

SUSE-RU-2015:0591-1

Vulnerability from csaf_suse - Published: 2014-08-22 11:39 - Updated: 2026-09-15 08:45

Summary

Recommended update for apache2-mod_nss

Severity

Moderate

Notes

Title of the patch: Recommended update for apache2-mod_nss

Description of the patch: This update brings several improvements to apache2-mod_nss. * More TLS 1.2 ciphers have been added, including AES-GCM and Camelia ciphers. These can be selected by their tags: o rsa_aes_128_sha256 o rsa_aes_128_gcm_sha o rsa_aes_256_sha256 o rsa_camellia_128_sha o rsa_camellia_256_sha o ecdh_ecdsa_aes_128_gcm_sha o ecdhe_ecdsa_aes_128_sha256 o ecdhe_ecdsa_aes_128_gcm_sha o ecdh_rsa_aes_128_gcm_sha o ecdhe_rsa_aes_128_sha256 * The mod_nss.conf.in template was updated to include those ciphers. (bnc#863035) * VirtualHost settings in /etc/apache2/conf.d/mod_nss.conf is now externalized to /etc/apache2/vhosts.d/vhost-nss.template and not activated/read by default. (bnc#878681) * The Server Name Indication (SNI) extension was implemented. * Reading the pass phrase during start-up was improved. (bnc#863518)

Patchnames: slessp3-apache2-mod_nss

CVE-2013-4566

Affected products

Recommended 15 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.ia64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.ppc64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ia64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ppc64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ia64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ppc64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

14 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://lists.suse.com/pipermail/sle-updates/2015…	self
https://bugzilla.suse.com/847216	self
https://bugzilla.suse.com/853039	self
https://bugzilla.suse.com/863035	self
https://bugzilla.suse.com/863518	self
https://bugzilla.suse.com/864929	self
https://bugzilla.suse.com/878681	self
https://bugzilla.suse.com/897712	self
https://bugzilla.suse.com/902068	self
https://www.suse.com/security/cve/CVE-2013-4566/	self
https://www.suse.com/security/cve/CVE-2013-4566	external
https://bugzilla.suse.com/853039	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Recommended update for apache2-mod_nss",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update brings several improvements to apache2-mod_nss.\n\n    * \n\n      More TLS 1.2 ciphers have been added, including AES-GCM and Camelia\n      ciphers. These can be selected by their tags:\n\n          o rsa_aes_128_sha256\n          o rsa_aes_128_gcm_sha\n          o rsa_aes_256_sha256\n          o rsa_camellia_128_sha\n          o rsa_camellia_256_sha\n          o ecdh_ecdsa_aes_128_gcm_sha\n          o ecdhe_ecdsa_aes_128_sha256\n          o ecdhe_ecdsa_aes_128_gcm_sha\n          o ecdh_rsa_aes_128_gcm_sha\n          o ecdhe_rsa_aes_128_sha256\n    * \n\n      The mod_nss.conf.in template was updated to include those ciphers.\n      (bnc#863035)\n\n    * \n\n      VirtualHost settings in /etc/apache2/conf.d/mod_nss.conf is now\n      externalized to /etc/apache2/vhosts.d/vhost-nss.template and not\n      activated/read by default. (bnc#878681)\n\n    * \n\n      The Server Name Indication (SNI) extension was implemented.\n\n    * \n\n      Reading the pass phrase during start-up was improved. (bnc#863518)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "slessp3-apache2-mod_nss",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-ru-2015_0591-1.json"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-RU-2015:0591-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2015-March/002814.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 847216",
        "url": "https://bugzilla.suse.com/847216"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 853039",
        "url": "https://bugzilla.suse.com/853039"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 863035",
        "url": "https://bugzilla.suse.com/863035"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 863518",
        "url": "https://bugzilla.suse.com/863518"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 864929",
        "url": "https://bugzilla.suse.com/864929"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 878681",
        "url": "https://bugzilla.suse.com/878681"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 897712",
        "url": "https://bugzilla.suse.com/897712"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 902068",
        "url": "https://bugzilla.suse.com/902068"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-4566 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-4566/"
      }
    ],
    "title": "Recommended update for apache2-mod_nss",
    "tracking": {
      "current_release_date": "2026-09-15T08:45:32Z",
      "generator": {
        "date": "2014-08-22T11:39:07Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-RU-2015:0591-1",
      "initial_release_date": "2014-08-22T11:39:07Z",
      "revision_history": [
        {
          "date": "2014-08-22T11:39:07Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-15T08:45:32Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-mod_nss-1.0.8-0.4.9.1.i586",
                "product": {
                  "name": "apache2-mod_nss-1.0.8-0.4.9.1.i586",
                  "product_id": "apache2-mod_nss-1.0.8-0.4.9.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-mod_nss-1.0.8-0.4.9.1.ia64",
                "product": {
                  "name": "apache2-mod_nss-1.0.8-0.4.9.1.ia64",
                  "product_id": "apache2-mod_nss-1.0.8-0.4.9.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-mod_nss-1.0.8-0.4.9.1.ppc64",
                "product": {
                  "name": "apache2-mod_nss-1.0.8-0.4.9.1.ppc64",
                  "product_id": "apache2-mod_nss-1.0.8-0.4.9.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-mod_nss-1.0.8-0.4.9.1.s390x",
                "product": {
                  "name": "apache2-mod_nss-1.0.8-0.4.9.1.s390x",
                  "product_id": "apache2-mod_nss-1.0.8-0.4.9.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-mod_nss-1.0.8-0.4.9.1.x86_64",
                "product": {
                  "name": "apache2-mod_nss-1.0.8-0.4.9.1.x86_64",
                  "product_id": "apache2-mod_nss-1.0.8-0.4.9.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:11:sp3:teradata"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.i586"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ia64"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ppc64"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.s390x"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.x86_64"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.i586"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.ia64"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.ppc64"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.s390x"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.x86_64"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.i586"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ia64"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ppc64"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.s390x"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-mod_nss-1.0.8-0.4.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.x86_64"
        },
        "product_reference": "apache2-mod_nss-1.0.8-0.4.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-4566",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-4566"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-4566",
          "url": "https://www.suse.com/security/cve/CVE-2013-4566"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 853039 for CVE-2013-4566",
          "url": "https://bugzilla.suse.com/853039"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-mod_nss-1.0.8-0.4.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-mod_nss-1.0.8-0.4.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-08-22T11:39:07Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-4566"
    }
  ]
}

CVE-2013-4566 (GCVE-0-2013-4566)

Vulnerability from cvelistv5 – Published: 2013-12-12 18:00 – Updated: 2024-08-06 16:45

Summary

mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

3 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1016832	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2013-1779.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2013-1…	vendor-advisoryx_refsource_SUSE

Date Public

2013-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:45:15.240Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1016832"
          },
          {
            "name": "RHSA-2013:1779",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1779.html"
          },
          {
            "name": "openSUSE-SU-2013:1956",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-12/msg00118.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting in the directory context, which allows remote attackers to bypass intended access restrictions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-01-02T21:57:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1016832"
        },
        {
          "name": "RHSA-2013:1779",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1779.html"
        },
        {
          "name": "openSUSE-SU-2013:1956",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-12/msg00118.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-4566",
    "datePublished": "2013-12-12T18:00:00.000Z",
    "dateReserved": "2013-06-12T00:00:00.000Z",
    "dateUpdated": "2024-08-06T16:45:15.240Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.