Red Hat Security AdvisoryRHSA-2009:1184
nspr and nss security and bug fix update
Released 2009-07-30 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 nspr-4.7.4-1.el4_8.1, nspr-4.7.4-1.el4_8.1.i386, nspr-4.7.4-1.el4_8.1.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 nspr-4.7.4-1.el4_8.1, nspr-4.7.4-1.el4_8.1.i386, nspr-devel-4.7.4-1.el4_8.1 +7
- Red Hat Enterprise Linux ES version 4 nspr-4.7.4-1.el4_8.1, nspr-4.7.4-1.el4_8.1.i386, nspr-4.7.4-1.el4_8.1.ia64 +12
- Red Hat Enterprise Linux WS version 4 nspr-4.7.4-1.el4_8.1, nspr-4.7.4-1.el4_8.1.i386, nspr-4.7.4-1.el4_8.1.ia64 +12
Fixes 3 records
Priority MEDIUM 47
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows r…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04155 · Published 2009-08-03 · Fixed CWE-119
Priority LOW 35
Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.05741 · Published 2009-07-30 · Fixed CWE-295
Priority LOW 30
The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.0427 · Published 2009-07-30 · Fixed CWE-295
THREATIST.IORead the docs