Lucene search
UbuntuUSN-2088-1HistoryJan 23, 2014 - 12:00 a.m.
NSS vulnerability
2014-01-2300:00:00
ubuntu.com
31
7.8 High
AI Score
Confidence
High
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
48.7%
Releases
- Ubuntu 13.10
- Ubuntu 12.10
- Ubuntu 12.04
- Ubuntu 10.04
Packages
- nss - Network Security Service library
Details
Brian Smith discovered that NSS incorrectly handled the TLS False Start
feature. If a remote attacker were able to perform a machine-in-the-middle
attack, this flaw could be exploited to spoof SSL servers.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 13.10 | noarch | libnss3 | < 2:3.15.4-0ubuntu0.13.10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libnss3-1d | < 2:3.15.4-0ubuntu0.13.10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libnss3-dbg | < 2:3.15.4-0ubuntu0.13.10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libnss3-dev | < 2:3.15.4-0ubuntu0.13.10.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libnss3-tools | < 2:3.15.4-0ubuntu0.13.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libnss3 | < 3.15.4-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libnss3-1d | < 3.15.4-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libnss3-dbg | < 3.15.4-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libnss3-dev | < 3.15.4-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libnss3-tools | < 3.15.4-0ubuntu0.12.10.1 | UNKNOWN |
References
Related
openvas
openvas
Ubuntu Update for nss USN-2088-1
2014-01-27 00:00:00
Slackware: Security Advisory (SSA:2014-028-02)
2022-04-21 00:00:00
Mageia: Security Advisory (MGASA-2014-0024)
2022-01-28 00:00:00
securityvulns
securityvulns
[USN-2088-1] NSS vulnerability
2014-01-29 00:00:00
Mozilla NSS SSL connection spoofing
2014-01-29 00:00:00
slackware
slackware
mozilla-nss
2014-01-28 14:58:39
debiancve
debiancve
CVE-2013-1740
2014-01-18 22:55:00
nessus
nessus
cve
cve
CVE-2013-1740
2014-01-18 22:55:00
mageia
mageia
Updated nss packages fix security vulnerability
2014-01-21 20:23:58
veracode
veracode
Man-in-the-Middle (MitM) Attacks
2019-01-15 08:57:10
Denial Of Service (DoS)
2019-05-02 05:03:51
ubuntucve
ubuntucve
CVE-2013-1740
2014-01-18 00:00:00
prion
prion
Design/Logic Flaw
2014-01-18 22:55:00
fedora
fedora
[SECURITY] Fedora 20 Update: nss-3.15.4-1.fc20
2014-01-21 05:50:16
[SECURITY] Fedora 19 Update: nss-softokn-3.15.4-1.fc19
2014-02-04 02:46:56
[SECURITY] Fedora 19 Update: nss-util-3.15.4-1.fc19
2014-02-04 02:46:56
centos
centos
nss security update
2014-09-30 11:21:57
nspr, nss security update
2014-07-23 02:49:51
oraclelinux
oraclelinux
nss and nspr security, bug fix, and enhancement update
2014-09-17 00:00:00
nss, nss-util, and nss-softokn security, bug fix, and enhancement update
2014-12-02 00:00:00
nss and nspr security, bug fix, and enhancement update
2014-07-22 00:00:00
redhat
redhat
f5
f5
SOL16716 - Multiple Mozilla NSS vulnerabilities
2015-06-05 00:00:00
K16716 : Multiple Mozilla NSS vulnerabilities
2015-09-17 00:00:00
suse
suse
Mozilla updates February 2014 (important)
2014-02-08 13:04:12
Mozilla Firefox 27 release (important)
2014-02-08 09:04:14
oracle
oracle
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
Oracle Critical Patch Update - October 2014
2014-10-14 00:00:00
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
7.8 High
AI Score
Confidence
High
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
48.7%
Related for USN-2088-1