CVE-2011-4973

Impact:
Moderate
Public Date:
2011-05-04
Bugzilla:
1017197: CVE-2011-4973 mod_nss: FakeBasicAuth authentication bypass

The MITRE CVE dictionary describes this issue as:

Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.

Find out more about CVE-2011-4973 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v2 metrics

Base Score 4
Base Metrics AV:N/AC:H/Au:N/C:P/I:P/A:N
Access Vector Network
Access Complexity High
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact None

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 6 (mod_nss) RHBA-2011:1656 2011-12-05
Red Hat Enterprise Linux 5 (mod_nss) RHBA-2013:0009 2013-01-07

Affected Packages State

Platform Package State
Red Hat Enterprise Linux 7 mod_nss Not affected
Red Hat Directory Server 8 fortitude-mod_nss Will not fix
Red Hat Certificate System 8 mod_nss Will not fix

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.