Session Overflow Vulnerability in mod_auth_mellon Module

Session Overflow Vulnerability in mod_auth_mellon Module

CVE-2014-8566 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:P

The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation fault) via unspecified vectors related to a "session overflow" involving "sessions overlapping in memory."

Learn more about our Web Application Penetration Testing UK.