Man-in-the-Middle Attack

nss-util is vulnerable to a man-in-the-middle attack. The library accepts a wildcard character that is embedded in an internationalized domain name's U-labels in the certTestHostName function in lib/certdb/certdb.c , allowing a malicious user to spoof SSL servers via a crafted certificate...

CVE-2014-1492: Improper Input Validation

The certTestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services NSS before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof...

Multiple Products NSS Library Buffer Overflow Vulnerability

This host is installed with Firefox or Thunderbird or SeaMonkey or Evolution or Pidgin or AOL Instant Messenger Products which is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbmultprdtsnsslibbofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Multiple Products NSS Library...

CVE-2009-2404: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services NSS before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger AIM, allows remote SSL servers to cause a denial of service application crash or possibly...

CVE-2004-0765: Undefined Security Weakness

The certTestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name FQDN, which allows remote attackers to spoof trusted certificates...