NSS vulnerability

2009-03-1700:00:00

ubuntu.com

9.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.012 Low

EPSS

Percentile

85.2%

JSON

Releases

Ubuntu 8.10
Ubuntu 8.04
Ubuntu 7.10
Ubuntu 6.06

Packages

firefox -
nss -

Details

The MD5 algorithm is known not to be collision resistant. This update
blocklists the proof of concept rogue certificate authority as discussed
in <http://www.win.tue.nl/hashclash/rogue-ca/>.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibnss3-1d< 3.12.0.3-0ubuntu5.8.10.1UNKNOWN
Ubuntu8.10noarchlibnss3-0d< 3.12.0.3-0ubuntu5.8.10.1UNKNOWN
Ubuntu8.10noarchlibnss3-1d< dbg-3.12.0.3-0ubuntu5.8.10.1UNKNOWN
Ubuntu8.10noarchlibnss3-dev< 3.12.0.3-0ubuntu5.8.10.1UNKNOWN
Ubuntu8.10noarchlibnss3-tools< 3.12.0.3-0ubuntu5.8.10.1UNKNOWN
Ubuntu8.04noarchlibnss3-0d< 3.12.0.3-0ubuntu0.8.04.5UNKNOWN
Ubuntu8.04noarchlibnss3-1d< 3.12.0.3-0ubuntu0.8.04.5UNKNOWN
Ubuntu8.04noarchlibnss3-1d-dbg< 3.12.0.3-0ubuntu0.8.04.5UNKNOWN
Ubuntu8.04noarchlibnss3-dev< 3.12.0.3-0ubuntu0.8.04.5UNKNOWN
Ubuntu8.04noarchlibnss3-tools< 3.12.0.3-0ubuntu0.8.04.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	libnss3-1d	< 3.12.0.3-0ubuntu5.8.10.1	UNKNOWN
Ubuntu	8.10	noarch	libnss3-0d	< 3.12.0.3-0ubuntu5.8.10.1	UNKNOWN
Ubuntu	8.10	noarch	libnss3-1d	< dbg-3.12.0.3-0ubuntu5.8.10.1	UNKNOWN
Ubuntu	8.10	noarch	libnss3-dev	< 3.12.0.3-0ubuntu5.8.10.1	UNKNOWN
Ubuntu	8.10	noarch	libnss3-tools	< 3.12.0.3-0ubuntu5.8.10.1	UNKNOWN
Ubuntu	8.04	noarch	libnss3-0d	< 3.12.0.3-0ubuntu0.8.04.5	UNKNOWN
Ubuntu	8.04	noarch	libnss3-1d	< 3.12.0.3-0ubuntu0.8.04.5	UNKNOWN
Ubuntu	8.04	noarch	libnss3-1d-dbg	< 3.12.0.3-0ubuntu0.8.04.5	UNKNOWN
Ubuntu	8.04	noarch	libnss3-dev	< 3.12.0.3-0ubuntu0.8.04.5	UNKNOWN
Ubuntu	8.04	noarch	libnss3-tools	< 3.12.0.3-0ubuntu0.8.04.5	UNKNOWN