CVE-2013-1620

2013-02-0819:55:01

CWE-203

[email protected]

web.nvd.nist.gov

cve-2013-1620

mozilla

network security

nss

tls

timing side-channel attacks

mac check operation

cbc padding

remote attackers

statistical analysis

crafted packets

plaintext-recovery attacks

nvd

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.9%

JSON

CPENameOperatorVersion
mozilla:network_security_servicesmozilla network security serviceslt3.14.3
canonical:ubuntu_linuxcanonical ubuntu linuxeq10.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq11.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.10
oracle:enterprise_manager_ops_centeroracle enterprise manager ops centereq11.1
oracle:enterprise_manager_ops_centeroracle enterprise manager ops centereq12.1
oracle:enterprise_manager_ops_centeroracle enterprise manager ops centereq12.2
oracle:glassfish_communications_serveroracle glassfish communications servereq2.0
oracle:glassfish_serveroracle glassfish servereq2.1.1

CPE	Name	Operator	Version
mozilla:network_security_services	mozilla network security services	lt	3.14.3
canonical:ubuntu_linux	canonical ubuntu linux	eq	10.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	11.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.10
oracle:enterprise_manager_ops_center	oracle enterprise manager ops center	eq	11.1
oracle:enterprise_manager_ops_center	oracle enterprise manager ops center	eq	12.1
oracle:enterprise_manager_ops_center	oracle enterprise manager ops center	eq	12.2
oracle:glassfish_communications_server	oracle glassfish communications server	eq	2.0
oracle:glassfish_server	oracle glassfish server	eq	2.1.1