Поиск уязвимостей
Количество 6
Количество 6
CVE-2014-3616
nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.
CVE-2014-3616
nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.
CVE-2014-3616
nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.
CVE-2014-3616
nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cach ...
GHSA-ch64-2v27-7pwp
nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.
ALT-PU-2014-2153
ALT-PU-2014-2153: package `nginx` update to version 1.6.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2014-3616 nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks. | CVSS2: 4.3 | 6% Низкий | почти 12 лет назад | |
CVE-2014-3616 nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks. | CVSS2: 5.8 | 6% Низкий | больше 12 лет назад | |
CVE-2014-3616 nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks. | CVSS2: 4.3 | 6% Низкий | почти 12 лет назад | |
CVE-2014-3616 nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cach ... | CVSS2: 4.3 | 6% Низкий | почти 12 лет назад | |
GHSA-ch64-2v27-7pwp nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks. | 6% Низкий | больше 4 лет назад | ||
ALT-PU-2014-2153 ALT-PU-2014-2153: package `nginx` update to version 1.6.2-alt1 | CVSS2: 4.3 | 6% Низкий | около 12 лет назад |
Уязвимостей на страницу