CVE-2013-5606

Technical details (affected product/component/versions, root cause or exploit information) are not provided in the connected documents for CVE-2013-5606. Monitor for updates.

CVE-2013-5606

The CERTVerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services NSS 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access...

PT-2013-5676

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions 3.15 through 3.15.2 Description The issue is related to the CERT VerifyCert function in lib/certhigh/certvfy.c, which provides an unexpected return value for an incompatible key-usage certificate...