CVE catalog

CVE-2011-4973

UBUNTU-CVE-2011-4973

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.00% · Oct 25, 2026

Authentication bypass vulnerability in mod_nss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntulibapache2-mod-nss16.041.0.11-1vulnerable
Ubuntulibapache2-mod-nss16.041.0.12-1vulnerable
Ubuntulibapache2-mod-nss16.041.0.12-2vulnerable
Ubuntulibapache2-mod-nss18.041.0.14-1build1vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References