Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-2091HistoryMar 13, 2015 - 2:59 p.m.
CVE-2015-2091
2015-03-1314:59:02
Debian Security Bug Tracker
security-tracker.debian.org
11
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
48.7%
The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate client certificates when “GnuTLSClientVerify require” is set, which allows remote attackers to spoof clients via a crafted certificate.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | mod-gnutls | < 0.6-1.3 | mod-gnutls_0.6-1.3_all.deb |
Related
openvas
openvas
Debian Security Advisory DSA 3177-1 (mod-gnutls - security update)
2015-03-10 00:00:00
Debian: Security Advisory (DLA-170-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3177-1)
2015-03-09 00:00:00
nessus
nessus
Debian DSA-3177-1 : mod-gnutls - security update
2015-03-11 00:00:00
Debian DLA-170-1 : mod-gnutls security update
2015-03-26 00:00:00
GLSA-201709-04 : mod_gnutls: Certificate validation error
2017-09-18 00:00:00
debian
debian
[SECURITY] [DSA 3177-1] mod-gnutls security update
2015-03-10 22:41:35
[SECURITY] [DSA 3177-1] mod-gnutls security update
2015-03-10 22:41:35
[SECURITY] [DLA 170-1] mod-gnutls security update
2015-03-14 16:35:48
securityvulns
securityvulns
[SECURITY] [DSA 3177-1] mod-gnutls security update
2015-03-15 00:00:00
Apache multiple security vulnerabilities
2015-04-16 00:00:00
osv
osv
mod-gnutls - security update
2015-03-10 00:00:00
mod-gnutls - security update
2015-03-14 00:00:00
gentoo
gentoo
mod_gnutls: Certificate validation error
2017-09-17 00:00:00
ubuntucve
ubuntucve
CVE-2015-2091
2015-03-13 00:00:00
cvelist
cvelist
CVE-2015-2091
2015-03-13 14:00:00
cve
cve
CVE-2015-2091
2015-03-13 14:59:02
nvd
nvd
CVE-2015-2091
2015-03-13 14:59:02
prion
prion
Authentication flaw
2015-03-13 14:59:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
48.7%
Related for DEBIANCVE:CVE-2015-2091