Mozilla Suite NSS Library Memory Leak Vulnerability

Description: Mozilla Suite 1.7.1.3 is susceptible to affected to DoS-type memory leak vulnerability disclosed in Mozilla Network Security Services library implementation. This library is shipped with the newest Mozilla Suite browser. Reportedly the Network Security Services NSS library will leak...

Mozilla Firefox NSS Library Memory Leak Vulnerability

Description: Mozilla Firefox 1.5.0.4 is susceptible to affected to DoS-type memory leak vulnerability disclosed in Mozilla Network Security Services library implementation. Reportedly the Network Security Services NSS library will leak 256 bytes of memory per RSA cryptographic operation. After a...

CVE-2006-3127

Memory leak in Network Security Services NSS 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2, allows remote attackers to cause a denial of service memory consumption by performing a large number of RSA cryptographic operations...

CVE-2006-3127

CVE-2006-3127 describes a memory leak in Network Security Services (NSS) 3.11 used by Sun Java Enterprise System (2003Q4–2005Q1) and Java System Directory Server 5.2. The issue allows remote attackers to trigger a denial of service by performing a large number of RSA cryptographic operations, lea...

CVE-2006-3127: Undefined Security Weakness

Memory leak in Network Security Services NSS 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2, allows remote attackers to cause a denial of service memory consumption by performing a large number of RSA cryptographic operations...

devhelp, mozilla security update

CentOS Errata and Security Advisory CESA-2006:0329 Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the...

NSS Library SSLv2 Challenge Overflow

The remote host seems to be using the Mozilla Network Security Services NSS Library, a set of libraries designed to support the development of security-enabled client/server application. SPDX-FileCopyrightText: 2004 Digital Defense Inc. Some text descriptions might be excerpted from a referenced...

USN-152-1: PAM/NSS LDAP vulnerabilitiy

Andrea Barisani discovered a flaw in the SSL handling of pam-ldap and libnss-ldap. When a client connected to a consumer LDAP server using SSL, the consumer server did not use SSL as well when contacting the LDAP provider server. This caused passwords and other confident information to be...

FreeBSD : nss (1772)

The following package needs to be updated: nss %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF, PostScript,...

Slackware 10.0 / 10.1 / 9.1 / current : Mozilla/Firefox/Thunderbird (SSA:2005-085-01)

New Mozilla packages are available for Slackware 9.1, 10.0, 10.1, and -current to fix various security issues and bugs. See the Mozilla site for a complete list of the issues patched: http://www.mozilla.org/projects/security/known-vulnerabilities.htmlMo zilla Also updated are Firefox and...

DEBIAN-CVE-2005-2069

pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password...

Mozilla/Firefox/Thunderbird

New Mozilla packages are available for Slackware 9.1, 10.0, 10.1, and -current to fix various security issues and bugs. See the Mozilla site for a complete list of the issues patched: http://www.mozilla.org/projects/security/known-vulnerabilities.htmlMozilla Also updated are Firefox and Thunderbi...

Solaris 9 (x86) : 117725-10

SunOS 5.9x86: NSPR 4.5.1 / NSS 3.9.5 / JS. Date this patch was last updated by Sun : Feb/07/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Immunity Canvas: NSS

Name| nss ---|--- CVE| CVE-2004-0826 Exploit Pack| CANVAS Description| NSS overflow Notes| CVE Name: CVE-2004-0826 VENDOR: Mozilla References: http://www.osvdb.org/displayvuln.php?osvdbid=9116 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0826 Date public: 23 of August, 2004...

CVE-2004-0826

CVE-2004-0826 affects the Netscape Network Security Services (NSS) library’s SSLv2 record parsing. The issue is a heap-based buffer overflow triggered by a modified record length field in an SSLv2 client hello, allowing a remote attacker to execute arbitrary code. Multiple advisories and OpenVAS ...

CVE-2004-0826: Undefined Security Weakness

Heap-based buffer overflow in Netscape Network Security Services NSS library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message...

Netscape NSS libraries buffer overflow

Buffer overflow during SSL negotiation...

ISS Protection Brief: Netscape NSS Library Remote Compromise

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief August 23, 2004 Protection for Netscape NSS Library Remote Compromise Summary: A vulnerability exists in the Netscape Network Security Services NSS library suite which may result in remote compromise of products making...

Netscape NSS Library SSLv2 Challenge Overflow

The remote host seems to be using the Mozilla Network Security Services NSS Library, a set of libraries designed to support the development of security-enabled client/server applications. There seems to be a flaw in the remote version of this library, in the SSLv2 handling code, that may allow an...

nss -- exploitable buffer overflow in SSLv2 protocol handler

ISS X-Force reports that a remotely exploitable buffer overflow exists in the Netscape Security Services NSS library's implementation of SSLv2. From their advisory: The NSS library contains a flaw in SSLv2 record parsing that may lead to remote compromise. When parsing the first record in an SSLv...