Mozilla网络安全服务库远程拒绝服务漏洞

网络安全服务（NSS）是一组函数库，可跨平台提供SSL、S/MIME和其他Internet安全标准支持。 Sun Java Enterprise System和Java System目录服务器中所使用的NSS中存在内存泄露漏洞，如果远程攻击者执行了大量RSA加密操作的话，就会耗尽大量系统内存，导致拒绝服务。 Sun Java System Directory Server Enterprise Edition Sun Java System Directory Server 5.2 Mozilla NSS 3.11 临时解决方法： 使用以下命令重启LDAP服务进程：...

Solaris 10 (sparc) : 120473-12

SunOS 5.10: libc nss ldap PAM zfs patch. Date this patch was last updated by Sun : Jul/11/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Sun Java Enterprise Server NSS Remote Code Execution Vulnerabilities

The version of Sun Java Enterprise Server ES installed on the remote host includes a set of libraries known as Network Security Services NSS for use with many of Java ES' services. On a Windows host, though, vulnerabilities in their implementation of SSL2 support reportedly allow a remote attacke...

GLSA-200703-18 : Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200703-18 Mozilla Thunderbird: Multiple vulnerabilities Georgi Guninski reported a possible integer overflow in the code handling text/enhanced or text/richtext MIME emails. Additionally, various researchers reported errors in the...

Solaris 10 (sparc) : 125358-25 (deprecated)

NSSNSPRJSS 3.30.2 Solaris: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2 Ma. Date this patch was last updated by Sun : Nov/09/17 This plugin has been deprecated and either replaced with individual 125358 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 10 (x86) : 125359-25 (deprecated)

NSSNSPRJSS 3.30.2 Solarisx86: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.. Date this patch was last updated by Sun : Nov/11/17 This plugin has been deprecated and either replaced with individual 125359 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 8 (sparc) : 125358-25

NSSNSPRJSS 3.30.2 Solaris: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2 Ma. Date this patch was last updated by Sun : Nov/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 125358-25

NSSNSPRJSS 3.30.2 Solaris: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2 Ma. Date this patch was last updated by Sun : Nov/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Mozilla Thunderbird: Multiple vulnerabilities

Background Mozilla Thunderbird is a popular open-source email client from the Mozilla Project. Description Georgi Guninski reported a possible integer overflow in the code handling text/enhanced or text/richtext MIME emails. Additionally, various researchers reported errors in the JavaScript engi...

Solaris 9 (x86) : 125359-25

NSSNSPRJSS 3.30.2 Solarisx86: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.. Date this patch was last updated by Sun : Nov/11/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Critical: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were foun...

USN-431-1: Thunderbird vulnerabilities

The SSLv2 protocol support in the NSS library did not sufficiently check the validity of public keys presented with a SSL certificate. A malicious SSL web site using SSLv2 could potentially exploit this to execute arbitrary code with the user's privileges. CVE-2007-0008 The SSLv2 protocol support...

Mozilla Network Security Services (NSS) fails to properly process malformed SSLv2 server messages

Overview A vulnerability in the way Mozilla Network Security Services NSS handles malformed SSLv2 server messages may lead to execution of arbitrary code. Description The SSLv2 protocol uses a client master key to generate all subsequent session keys. The client master key is created using a publ...

Mozilla Network Security Services (NSS) fails to properly handle the client master key

Overview A vulnerability in the way Mozilla Network Security Services NSS handles the client master key may lead to execution of arbitrary code. Description The SSLv2 protocol uses a client master key to generate all subsequent session keys. The validity of the client master key is determined...

CentOS 4 : thunderbird (CESA-2007:0078)

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 06 March 2007 Updated text description to add CVE-2007-1282 and remove...

Critical: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 06 March 2007 Updated text description to add CVE-2007-1282 and remove...

Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2007:050-1)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 1.5.0.10. This update provides the latest Firefox to correct these issues. Update : A regression was found in the latest Firefox packages provided where changes to library paths...

USN-428-1: Firefox vulnerabilities

Several flaws have been found that could be used to perform Cross-site scripting attacks. A malicious web site could exploit these to modify the contents or steal confidential data such as passwords from other opened web pages. CVE-2006-6077, CVE-2007-0780, CVE-2007-0800, CVE-2007-0981,...

Fedora Core 6 : nspr-4.6.5-0.6.0.fc6 / nss-3.11.5-0.6.0.fc6 (2007-279)

This update fixes two security vulnerabilities with SSL 2 CVE-2007-0008, CVE-2007-0009. All users of NSS, which includes users of Firefox, Thunderbird, SeaMonkey, and other mozilla.org products, are recommended to update to this package. Note that Tenable Network Security has extracted the...

Mozilla Foundation Security Advisory 2007-06

Mozilla Foundation Security Advisory 2007-06 Title: Mozilla Network Security Services NSS SSLv2 buffer overflows Impact: Critical Firefox 2.0 not affected in default configuration Announced: February 23, 2007 Reporter: iDefense Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.2...