Lucene search
GoogleOSV:DLA-170-1HistoryMar 14, 2015 - 12:00 a.m.
mod-gnutls - security update
2015-03-1400:00:00
Google
osv.dev
11
0.001 Low
EPSS
Percentile
48.7%
Thomas Klute discovered that in mod-gnutls, an Apache module providing
SSL and TLS encryption with GnuTLS, a bug caused the server’s client
verify mode not to be considered at all, in case the directory’s
configuration was unset. Clients with invalid certificates were then
able to leverage this flaw in order to get access to that directory.
For Debian 6 Squeeze, these issues have been fixed in mod-gnutls version 0.5.6-1+squeeze2
| CPE | Name | Operator | Version |
|---|---|---|---|
| mod-gnutls | eq | 0.5.6-1 | |
| mod-gnutls | eq | 0.5.6-1+squeeze1 |
References
Related
openvas
openvas
Debian Security Advisory DSA 3177-1 (mod-gnutls - security update)
2015-03-10 00:00:00
Debian: Security Advisory (DLA-170-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3177-1)
2015-03-09 00:00:00
nessus
nessus
Debian DSA-3177-1 : mod-gnutls - security update
2015-03-11 00:00:00
Debian DLA-170-1 : mod-gnutls security update
2015-03-26 00:00:00
GLSA-201709-04 : mod_gnutls: Certificate validation error
2017-09-18 00:00:00
debian
debian
[SECURITY] [DSA 3177-1] mod-gnutls security update
2015-03-10 22:41:35
[SECURITY] [DSA 3177-1] mod-gnutls security update
2015-03-10 22:41:35
[SECURITY] [DLA 170-1] mod-gnutls security update
2015-03-14 16:35:48
securityvulns
securityvulns
[SECURITY] [DSA 3177-1] mod-gnutls security update
2015-03-15 00:00:00
Apache multiple security vulnerabilities
2015-04-16 00:00:00
osv
osv
mod-gnutls - security update
2015-03-10 00:00:00
gentoo
gentoo
mod_gnutls: Certificate validation error
2017-09-17 00:00:00
ubuntucve
ubuntucve
CVE-2015-2091
2015-03-13 00:00:00
cvelist
cvelist
CVE-2015-2091
2015-03-13 14:00:00
nvd
nvd
CVE-2015-2091
2015-03-13 14:59:02
debiancve
debiancve
CVE-2015-2091
2015-03-13 14:59:02
cve
cve
CVE-2015-2091
2015-03-13 14:59:02
prion
prion
Authentication flaw
2015-03-13 14:59:00