ubuntu · CVE-2011-4973

Quick triage

Priority: medium Published: 2018-02-15 21:29:00 UTC Updated: 2025-08-26 11:51:43 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2011-4973 medium priority: Ubuntu including 1 source packages (libapache2-mod-nss), 30 status rows across 30 suites (artful, bionic, cosmic, disco, eoan, focal, groovy, hirsute, impish, jammy, kinetic, lucid, lunar, mantic, noble, oracular, plucky, precise, quantal, questing, raring, saucy, trusty, upstream, utopic, vivid, wily, xenial, yakkety, zesty): DNE 16, ignored 11, needed 3.

Description:

Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.

cvelogic Threat Intelligence