[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

95906

 
 

909

 
 

77982

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2007-0009

Date: (C)2007-02-26   (M)2017-10-12
 
CVSS Score: 6.8Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL











Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.

Reference:
SECTRACK-1017696
SUNALERT-102856
SUNALERT-102945
20070202-01-P
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=483
http://www.securityfocus.com/archive/1/archive/1/461336/100/0/threaded
20070301-01-P
http://www.securityfocus.com/archive/1/archive/1/461809/100/0/threaded
SECUNIA-24253
SECUNIA-24277
SECUNIA-24287
SECUNIA-24290
SECUNIA-24293
SECUNIA-24333
SECUNIA-24342
SECUNIA-24343
SECUNIA-24384
SECUNIA-24389
SECUNIA-24395
SECUNIA-24406
SECUNIA-24410
SECUNIA-24455
SECUNIA-24456
SECUNIA-24457
SECUNIA-24522
SECUNIA-24562
SECUNIA-24650
SECUNIA-24703
SECUNIA-25588
SECUNIA-25597
OSVDB-32106
BID-64758
ADV-2007-0718
ADV-2007-0719
ADV-2007-1165
ADV-2007-2141
DSA-1336
FEDORA-2007-278
FEDORA-2007-279
FEDORA-2007-308
FEDORA-2007-309
GLSA-200703-18
GLSA-200703-22
HPSBUX02153
IAVM:2014-A-0009
MDKSA-2007:050
MDKSA-2007:052
RHSA-2007:0077
RHSA-2007:0078
RHSA-2007:0079
RHSA-2007:0097
RHSA-2007:0108
SSA:2007-066-03
SSA:2007-066-04
SSA:2007-066-05
SSRT061181
SUSE-SA:2007:019
SUSE-SA:2007:022
USN-428-1
USN-431-1
VU#592796
http://www.mozilla.org/security/announce/2007/mfsa2007-06.html
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
https://bugzilla.mozilla.org/show_bug.cgi?id=364323
https://issues.rpath.com/browse/RPL-1081
https://issues.rpath.com/browse/RPL-1103
nss-clientmasterkey-bo(32663)

CPE    5
cpe:/a:mozilla:network_security_services:3.11.4
cpe:/a:mozilla:firefox:1.5.0.9
cpe:/a:mozilla:seamonkey:1.0.7
cpe:/a:mozilla:firefox:2.0.0.1
...
CWE    1
CWE-119

© 2013 SecPod Technologies