Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-927-1
HistoryApr 09, 2010 - 12:00 a.m.

NSS vulnerability

2010-04-0900:00:00
ubuntu.com
55

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.6%

JSON

Releases

  • Ubuntu 9.10

Packages

  • nss -

Details

Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3
protocols. If an attacker could perform a machine-in-the-middle attack at the
start of a TLS connection, the attacker could inject arbitrary content at
the beginning of the user’s session. This update adds support for the new
new renegotiation extension and will use it when the server supports it.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchlibnss3-1d< 3.12.6-0ubuntu0.9.10.1UNKNOWN
Ubuntu9.10noarchlibnss3-0d< 3.12.6-0ubuntu0.9.10.1UNKNOWN
Ubuntu9.10noarchlibnss3-1d-dbg< 3.12.6-0ubuntu0.9.10.1UNKNOWN
Ubuntu9.10noarchlibnss3-dev< 3.12.6-0ubuntu0.9.10.1UNKNOWN
Ubuntu9.10noarchlibnss3-tools< 3.12.6-0ubuntu0.9.10.1UNKNOWN

Related

openvas 63
fedora 10
debian 6
nessus 66
redhat 3
suse 1
altlinux 4
securityvulns 7
hackerone 2
seebug 4
cve 1
ubuntu 4
mozilla 1
slackware 1
oraclelinux 2
centos 2
cisco 2
checkpoint_advisories 3
ibm 1
nginx 1
github 1
prion 1
f5 2
exploitpack 1
osv 1
packetstorm 1
ubuntucve 1
openssl 1
debiancve 1
freebsd_advisory 1
cert 1
veracode 1
fortinet 1
cvelist 1
openvas
openvas
CentOS Update for nspr CESA-2010:0165 centos4 i386
2010-03-31 00:00:00
Fedora Update for nss FEDORA-2010-3905
2010-03-31 00:00:00
Fedora Core 11 FEDORA-2009-12305 (tomcat-native)
2009-12-30 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: nss-3.12.6-1.2.fc12
2010-03-12 04:18:37
[SECURITY] Fedora 12 Update: gnutls-2.8.6-2.fc12
2010-06-25 18:15:19
[SECURITY] Fedora 11 Update: nss-3.12.6-1.2.fc11
2010-03-23 02:03:18
debian
debian
[SECURITY] [DSA-2141-2] New nss packages fix protocol design flaw
2011-01-05 23:20:31
[SECURITY] [DSA-2141-4] New lighttpd packages fix regression
2011-01-12 18:51:18
[SECURITY] [DSA-2141-2] New nss packages fix protocol design flaw
2011-01-05 23:20:42
nessus
nessus
Ubuntu 8.04 LTS : nss vulnerability (USN-927-4)
2010-06-30 00:00:00
Fedora 12 : tomcat-native-1.1.18-1.fc12 (2009-12229)
2009-12-18 00:00:00
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6657)
2010-10-11 00:00:00
redhat
redhat
(RHSA-2010:0155) Moderate: java-1.4.2-ibm security and bug fix update
2010-03-17 00:00:00
(RHSA-2010:0164) Moderate: openssl097a security update
2010-03-25 00:00:00
(RHSA-2010:0165) Moderate: nss security update
2010-03-25 00:00:00
suse
suse
man-in-the-middle attack in openssl
2009-11-18 09:50:39
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 0.9.8l-alt1
2009-11-07 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8l-alt1
2009-11-07 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 0.9.8l-alt1
2009-11-07 00:00:00
securityvulns
securityvulns
Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability
2009-11-11 00:00:00
Mozilla Foundation Security Advisory 2010-22
2010-04-06 00:00:00
[security bulletin] HPSBMA02534 SSRT090180 rev.1 - HP System Management Homepage &#40;SMH&#41; for Linux and Windows, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service &#40;DoS&#41;
2010-05-20 00:00:00
hackerone
hackerone
LocalTapiola: Secure Client-Initiated Renegotiation
2017-12-27 15:57:52
Slack: TLS1/SSLv3 Renegotiation Vulnerability
2014-04-02 13:01:00
seebug
seebug
ProFTPD TLS会话重协商明文数据注入漏洞
2009-12-15 00:00:00
TLS Renegotiation Vulnerability PoC Exploit
2009-12-21 00:00:00
Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability
2009-11-10 00:00:00
cve
cve
CVE-2009-3555
2009-11-09 17:30:00
ubuntu
ubuntu
Apache vulnerability
2010-09-21 00:00:00
OpenSSL vulnerability
2010-09-21 00:00:00
nss vulnerability
2010-06-29 00:00:00
mozilla
mozilla
Update NSS to support TLS renegotiation indication — Mozilla
2010-03-30 00:00:00
slackware
slackware
openssl
2009-11-16 13:42:36
oraclelinux
oraclelinux
openssl097a security update
2010-03-25 00:00:00
nss security update
2010-03-25 00:00:00
centos
centos
openssl097a security update
2010-03-27 17:44:36
nspr, nss security update
2010-03-28 15:36:50
cisco
cisco
Transport Layer Security Renegotiation Vulnerability
2009-11-09 13:00:00
Transport Layer Security Renegotiation Remote Man-in-the-Middle Attack Vulnerability
2009-11-05 19:53:52
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against TLS and SSL Spoofing Vulnerability
2010-02-09 00:00:00
TLS Client Initiated Renegotiation (CVE-2009-3555)
2009-11-23 00:00:00
TLS Renegotiation (CVE-2009-3555)
2009-11-22 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities have been identified in IBM Tivoli Netcool/OMNIbus Probe for Network Node Manager i (CVE-2009-3555)
2020-06-23 08:41:14
nginx
nginx
The renegotiation vulnerability in SSL protocol
2009-11-09 17:30:00
github
github
Apache Tomcat affected by vulnerability in TLS and SSL protocol
2022-05-02 03:46:22
prion
prion
Cross site request forgery (csrf)
2009-11-09 17:30:00
f5
f5
K10737 : SSL Renegotiation vulnerability - CVE-2009-3555 / VU#120541
2013-07-05 00:00:00
SOL10737 - SSL Renegotiation vulnerability - CVE-2009-3555 / VU#120541
2009-11-05 00:00:00
exploitpack
exploitpack
TLS - Renegotiation
2009-12-21 00:00:00
osv
osv
Apache Tomcat affected by vulnerability in TLS and SSL protocol
2022-05-02 03:46:22
packetstorm
packetstorm
TLS Renegotiation Exploit
2009-12-21 00:00:00
ubuntucve
ubuntucve
CVE-2009-3555
2009-11-09 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2009-3555
2009-11-05 00:00:00
debiancve
debiancve
CVE-2009-3555
2009-11-09 17:30:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:15.ssl
2009-12-03 00:00:00
cert
cert
SSL and TLS protocols renegotiation vulnerability
2009-11-11 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:36:56
fortinet
fortinet
FortiOS SSL Deep-Inspection possible Insecure Renegotiation
2017-11-03 00:00:00
cvelist
cvelist
CVE-2009-3555
2009-11-09 17:00:00

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.6%

JSON
Related for USN-927-1
openvas63fedora10debian6nessus66redhat3suse1altlinux4securityvulns7hackerone2seebug4cve1ubuntu4mozilla1slackware1oraclelinux2centos2cisco2checkpoint_advisories3ibm1nginx1github1prion1f52exploitpack1osv1packetstorm1ubuntucve1openssl1debiancve1freebsd_advisory1cert1veracode1fortinet1cvelist1