Mozilla Network Security Services (NSS) 3.x, with certain settings of the SSL_ENABLE_RENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-1473. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - Mozilla NSS: Errors in mp_div and mp_exptmod cryptographic functions (CVE-2016-1938)

  - SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183)

  - The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer,     Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained     initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a     blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses     (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a     BEAST attack. (CVE-2011-3389)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - Mozilla NSS: Errors in mp_div and mp_exptmod cryptographic functions (CVE-2016-1938)

  - SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183)

  - The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer,     Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained     initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a     blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses     (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a     BEAST attack. (CVE-2011-3389)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - nss: TOCTOU, potential use-after-free in libssl's session ticket processing (MFSA 2014-12) (CVE-2014-1490)

  - nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite     length encodings (MFSA 2015-133) (CVE-2015-7182)

  - The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer,     Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained     initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a     blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses     (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a     BEAST attack. (CVE-2011-3389)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Severity
199394	RHEL 5 : nss (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199376	RHEL 6 : nss (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199346	RHEL 4 : nss (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical

Detections

Analytics

CVE-2011-5094

critical

Tenable Plugins

high

high

critical