CVE-2013-0791

The CERTDecodeCertPackage function in Mozilla Network Security Services NSS, as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial ...

Out-of-bounds array read in CERT_DecodeCertPackage — Mozilla

Mozilla community member Ambroz Bizjak reported an out-of-bounds array read in the CERTDecodeCertPackage function of the Network Security Services NSS library when decoding a certificate. When this occurs, it will lead to memory corruption and a non-exploitable crash...

CVE-2013-0287

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

CVE-2013-0287

CVE-2013-0287 affects System Security Services Daemon (SSSD) when using the Active Directory provider. The Simple Access Provider in SSSD 1.9.0–1.9.4 does not properly enforce the simple_deny_groups option, allowing remote authenticated users to bypass access restrictions. Connected advisories/pa...

sssd: simple access provider flaw prevents intended ACL use when client to an AD provider

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

Fedora Update for nss-softokn FEDORA-2013-3079

Check for the Version of nss-softokn OpenVAS Vulnerability Test Fedora Update for nss-softokn FEDORA-2013-3079 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for nss FEDORA-2013-3079

Check for the Version of nss OpenVAS Vulnerability Test Fedora Update for nss FEDORA-2013-3079 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for nss-util FEDORA-2013-3079

Check for the Version of nss-util OpenVAS Vulnerability Test Fedora Update for nss-util FEDORA-2013-3079 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 17 Update: nss-softokn-3.14.3-1.fc17

Network Security Services Softoken Cryptographic Module...

[SECURITY] Fedora 17 Update: nss-util-3.14.3-1.fc17

Utilities for Network Security Services and the Softoken module...

[SECURITY] Fedora 17 Update: nss-3.14.3-1.fc17

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Fedora Update for nss FEDORA-2013-2929

Check for the Version of nss OpenVAS Vulnerability Test Fedora Update for nss FEDORA-2013-2929 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for nss-util FEDORA-2013-2929

Check for the Version of nss-util OpenVAS Vulnerability Test Fedora Update for nss-util FEDORA-2013-2929 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for nss-softokn FEDORA-2013-2929

Check for the Version of nss-softokn OpenVAS Vulnerability Test Fedora Update for nss-softokn FEDORA-2013-2929 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

[SECURITY] Fedora 18 Update: nss-util-3.14.3-1.fc18

Utilities for Network Security Services and the Softoken module...

[SECURITY] Fedora 18 Update: nss-softokn-3.14.3-1.fc18

Network Security Services Softoken Cryptographic Module...

[SECURITY] Fedora 18 Update: nss-3.14.3-1.fc18

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

CVE-2013-0219

System Security Services Daemon SSSD before 1.9.4, when 1 creating, 2 copying, or 3 removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files...

CVE-2013-0220

The 1 sssautofscmdgetautomntent and 2 sssautofscmdgetautomntbyname function in responder/autofs/autofssrvcmd.c and the 3 sshcmdparserequest function in responder/ssh/sshsrvcmd.c in System Security Services Daemon SSSD before 1.9.4 allow remote attackers to cause a denial of service out-of-bounds...

Directory traversal

System Security Services Daemon SSSD before 1.9.4, when 1 creating, 2 copying, or 3 removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files...