Red Hat Security Advisory

RHSA-2009:1186

nspr and nss security, bug fix, and enhancement update

Released 2009-07-30 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) nspr-4.7.4-1.el5_3.1, nspr-4.7.4-1.el5_3.1.i386, nspr-4.7.4-1.el5_3.1.ia64 +21
Red Hat Enterprise Linux Desktop (v. 5 client) nspr-4.7.4-1.el5_3.1, nspr-4.7.4-1.el5_3.1.i386, nss-3.12.3.99.3-1.el5_3.2 +3
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) nspr-4.7.4-1.el5_3.1, nspr-devel-4.7.4-1.el5_3.1, nspr-devel-4.7.4-1.el5_3.1.i386 +5

Fixes 3 records

TI-2009-02294 CVE-2009-2404 · GHSA-9w79-fpqx-hcfm

Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security…

MEDIUM 47

Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows r…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04155 Published 2009-08-03 Fixed CWE-119

TI-2009-02298 CVE-2009-2408 · GHSA-pm7c-vg9h-jxxc

Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird…

LOW 35

Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.05741 Published 2009-07-30 Fixed CWE-295

TI-2009-02299 CVE-2009-2409 · GHSA-c2f9-w3c5-x385

The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS…

LOW 30

The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.0427 Published 2009-07-30 Fixed CWE-295