nss -- exploitable buffer overflow in SSLv2 protocol handler

ISS X-Force reports that a remotely exploitable buffer overflow exists in the Netscape Security Services NSS library's implementation of SSLv2. From their advisory: The NSS library contains a flaw in SSLv2 record parsing that may lead to remote compromise. When parsing the first record in an SSLv...

CVE-2002-0825

Buffer overflow in the DNS SRV code for nssldap before nssldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2002-0825

Buffer overflow in the DNS SRV code for nssldap before nssldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code...

RUS-CERT Advisory 2001-09:01

Vulnerabilities in PAM and NSS modules using a PostgreSQL database During investigating the problem described in RUS-CERT Advisory 2001-08:01, it became evident that a few PAM and NSS modules which use PostgreSQL as database backend are vulnerable to SQL code injections attacks, too. Systems...

PT-2006-7535 · Gentoo +3 · Gentoo Linux +7

Name of the Vulnerable Software and Affected Versions: libnspr4 versions affected versions not specified libnss3 versions affected versions not specified nss versions prior to 3.11.3 libnspr-dev versions affected versions not specified libnss-dev versions affected versions not specified...

PT-2009-6739

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8l GnuTLS versions prior to 2.8.5 Apache HTTP Server versions prior to 2.2.14 Microsoft Internet Information Services IIS 7.0 OpenVPN versions prior to 2.3.1 Mozilla Network Security Services NSS versions prior to...