The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has nss packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in the way NSS responded to an     SSLv2-compatible ClientHello with a ServerHello that had     an all-zero random. A man-in-the-middle attacker could     use this flaw in a passive replay attack.
    (CVE-2018-12384)

  - The TLS implementation in Mozilla Network Security     Services (NSS) does not properly consider timing side-     channel attacks on a noncompliant MAC check operation     during the processing of malformed CBC padding, which     allows remote attackers to conduct distinguishing     attacks and plaintext-recovery attacks via statistical     analysis of timing data for crafted packets, a related     issue to CVE-2013-0169. (CVE-2013-1620)

  - Mozilla Network Security Services (NSS) before 3.15.2     does not ensure that data structures are initialized     before read operations, which allows remote attackers to     cause a denial of service or possibly have unspecified     other impact via vectors that trigger a decryption     failure. (CVE-2013-1739)

  - A flaw was found in the way TLS False Start was     implemented in NSS. An attacker could use this flaw to     potentially return unencrypted information from the     server. (CVE-2013-1740)

  - Integer overflow in Mozilla Network Security Services     (NSS) 3.15 before 3.15.3 allows remote attackers to     cause a denial of service or possibly have unspecified     other impact via a large size value. (CVE-2013-1741)

  - Mozilla Network Security Services (NSS) 3.14 before     3.14.5 and 3.15 before 3.15.3 allows remote attackers to     cause a denial of service or possibly have unspecified     other impact via invalid handshake packets.
    (CVE-2013-5605)

  - The CERT_VerifyCert function in lib/certhigh/certvfy.c     in Mozilla Network Security Services (NSS) 3.15 before     3.15.3 provides an unexpected return value for an     incompatible key-usage certificate when the     CERTVerifyLog argument is valid, which might allow     remote attackers to bypass intended access restrictions     via a crafted certificate. (CVE-2013-5606)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2013-1740 The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

CVE-2014-1490 Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement of a session ticket.

CVE-2014-1491 Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.

CVE-2014-1492 The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is iframeded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.

CVE-2014-1544 Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.

CVE-2014-1545 Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.

The Oracle OpenSSO agent installed on the remote host is missing a vendor-supplied update. It is, therefore, affected by multiple vulnerabilities in the bundled Mozilla Network Security Services, the most serious of which can allow remote code execution.

The remote host has a version of Oracle WebLogic Server installed that is affected by multiple unspecified vulnerabilities affecting the following components :

  - WebLogic Tuxedo Connector
  - WLS-Console (Struts based)
  - WLS-Console

Updated nss and nspr packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

A flaw was found in the way TLS False Start was implemented in NSS. An attacker could use this flaw to potentially return unencrypted information from the server. (CVE-2013-1740)

A race condition was found in the way NSS implemented session ticket handling as specified by RFC 5077. An attacker could use this flaw to crash an application using NSS or, in rare cases, execute arbitrary code with the privileges of the user running that application.
(CVE-2014-1490)

It was found that NSS accepted weak Diffie-Hellman Key exchange (DHKE) parameters. This could possibly lead to weak encryption being used in communication between the client and the server. (CVE-2014-1491)

An out-of-bounds write flaw was found in NSPR. A remote attacker could potentially use this flaw to crash an application using NSPR or, possibly, execute arbitrary code with the privileges of the user running that application. This NSPR flaw was not exposed to web content in any shipped version of Firefox. (CVE-2014-1545)

It was found that the implementation of Internationalizing Domain Names in Applications (IDNA) hostname matching in NSS did not follow the RFC 6125 recommendations. This could lead to certain invalid certificates with international characters to be accepted as valid.
(CVE-2014-1492)

Red Hat would like to thank the Mozilla project for reporting the CVE-2014-1490, CVE-2014-1491, and CVE-2014-1545 issues. Upstream acknowledges Brian Smith as the original reporter of CVE-2014-1490, Antoine Delignat-Lavaud and Karthikeyan Bhargavan as the original reporters of CVE-2014-1491, and Abhishek Arya as the original reporter of CVE-2014-1545.

The nss and nspr packages have been upgraded to upstream version 3.16.1 and 4.10.6 respectively, which provide a number of bug fixes and enhancements over the previous versions. (BZ#1110857, BZ#1110860)

This update also fixes the following bugs :

* Previously, when the output.log file was not present on the system, the shell in the Network Security Services (NSS) specification handled test failures incorrectly as false positive test results.
Consequently, certain utilities, such as 'grep', could not handle failures properly. This update improves error detection in the specification file, and 'grep' and other utilities now handle missing files or crashes as intended. (BZ#1035281)

* Prior to this update, a subordinate Certificate Authority (CA) of the ANSSI agency incorrectly issued an intermediate certificate installed on a network monitoring device. As a consequence, the monitoring device was enabled to act as an MITM (Man in the Middle) proxy performing traffic management of domain names or IP addresses that the certificate holder did not own or control. The trust in the intermediate certificate to issue the certificate for an MITM device has been revoked, and such a device can no longer be used for MITM attacks. (BZ#1042684)

* Due to a regression, MD5 certificates were rejected by default because Network Security Services (NSS) did not trust MD5 certificates. With this update, MD5 certificates are supported in Red Hat Enterprise Linux 5. (BZ#11015864)

Users of nss and nspr are advised to upgrade to these updated packages, which correct these issues and add these enhancements.

A flaw was found in the way TLS False Start was implemented in NSS. An attacker could use this flaw to potentially return unencrypted information from the server. (CVE-2013-1740)

A race condition was found in the way NSS implemented session ticket handling as specified by RFC 5077. An attacker could use this flaw to crash an application using NSS or, in rare cases, execute arbitrary code with the privileges of the user running that application.
(CVE-2014-1490)

It was found that NSS accepted weak Diffie-Hellman Key exchange (DHKE) parameters. This could possibly lead to weak encryption being used in communication between the client and the server. (CVE-2014-1491)

An out-of-bounds write flaw was found in NSPR. A remote attacker could potentially use this flaw to crash an application using NSPR or, possibly, execute arbitrary code with the privileges of the user running that application. This NSPR flaw was not exposed to web content in any shipped version of Firefox. (CVE-2014-1545)

It was found that the implementation of Internationalizing Domain Names in Applications (IDNA) hostname matching in NSS did not follow the RFC 6125 recommendations. This could lead to certain invalid certificates with international characters to be accepted as valid.
(CVE-2014-1492)

The nss and nspr packages have been upgraded to upstream version 3.16.1 and 4.10.6 respectively, which provide a number of bug fixes and enhancements over the previous versions.

This update also fixes the following bugs :

  - Previously, when the output.log file was not present on     the system, the shell in the Network Security Services     (NSS) specification handled test failures incorrectly as     false positive test results. Consequently, certain     utilities, such as 'grep', could not handle failures     properly. This update improves error detection in the     specification file, and 'grep' and other utilities now     handle missing files or crashes as intended.

  - Prior to this update, a subordinate Certificate     Authority (CA) of the ANSSI agency incorrectly issued an     intermediate certificate installed on a network     monitoring device. As a consequence, the monitoring     device was enabled to act as an MITM (Man in the Middle)     proxy performing traffic management of domain names or     IP addresses that the certificate holder did not own or     control. The trust in the intermediate certificate to     issue the certificate for an MITM device has been     revoked, and such a device can no longer be used for     MITM attacks.

  - Due to a regression, MD5 certificates were rejected by     default because Network Security Services (NSS) did not     trust MD5 certificates. With this update, MD5     certificates are supported in Scientific Linux 5.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1246 advisory.

    [3.16.1-2]
    - Backport nss-3.12.6 upstream fix required by Firefox 31 ESR
    - Resolves: Bug 1110860

    [3.16.1-1]
    - Rebase to nss-3.16.1 for FF31
    - Resolves: Bug 1110860 - Rebase nss in RHEL 5.11 to NSS 3.16.1, required for FF 31

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running an unpatched version of Oracle Traffic Director that is affected by the following vulnerabilities :

  - The implementation of Network Security Services (NSS)     does not ensure that data structures are initialized,     which could result in a denial of service or disclosure     of sensitive information. (CVE-2013-1739)

  - The implementation of Network Security Services (NSS)     does not properly handle the TLS False Start feature     and could allow man-in-the-middle attacks.
    (CVE-2013-1740)

  - NSS contains an integer overflow flaw that allows     remote attackers to cause a denial of service.
    (CVE-2013-1741)

  - An error exists in the 'Null_Cipher' function in the     file 'ssl/ssl3con.c' related to handling invalid     handshake packets that could allow arbitrary code     execution. (CVE-2013-5605)

  - An error exists in the 'CERT_VerifyCert' function in     the file 'lib/certhigh/certvfy.c' that could allow     invalid certificates to be treated as valid.
    (CVE-2013-5606)

  - Network Security Services (NSS) contains a race     condition in libssl that occurs during session ticket     processing. A remote attacker can exploit this flaw     to cause a denial of service. (CVE-2014-1490)

  - Network Security Services (NSS) does not properly     restrict public values in Diffie-Hellman key exchanges,     allowing a remote attacker to bypass cryptographic     protection mechanisms. (CVE-2014-1491)

  - An issue exists in the Network Security (NSS) library     due to improper handling of IDNA domain prefixes for     wildcard certificates. This issue could allow man-in-     the-middle attacks. (CVE-2014-1492)

A race condition was found in the way NSS verified certain certificates. A remote attacker could use this flaw to crash an application using NSS or, possibly, execute arbitrary code with the privileges of the user running that application. (CVE-2014-1544)

A flaw was found in the way TLS False Start was implemented in NSS. An attacker could use this flaw to potentially return unencrypted information from the server. (CVE-2013-1740)

A race condition was found in the way NSS implemented session ticket handling as specified by RFC 5077. An attacker could use this flaw to crash an application using NSS or, in rare cases, execute arbitrary code with the privileges of the user running that application.
(CVE-2014-1490)

It was found that NSS accepted weak Diffie-Hellman Key exchange (DHKE) parameters. This could possibly lead to weak encryption being used in communication between the client and the server. (CVE-2014-1491)

An out-of-bounds write flaw was found in NSPR. A remote attacker could potentially use this flaw to crash an application using NSPR or, possibly, execute arbitrary code with the privileges of the user running that application. This NSPR flaw was not exposed to web content in any shipped version of Firefox. (CVE-2014-1545)

It was found that the implementation of Internationalizing Domain Names in Applications (IDNA) hostname matching in NSS did not follow the RFC 6125 recommendations. This could lead to certain invalid certificates with international characters to be accepted as valid.
(CVE-2014-1492)

In addition, the nss package has been upgraded to upstream version 3.16.1, and the nspr package has been upgraded to upstream version 4.10.6. These updated packages provide a number of bug fixes and enhancements over the previous versions.

After installing this update, applications using NSS or NSPR must be restarted for this update to take effect.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0917 advisory.

    Network Security Services (NSS) is a set of libraries designed to support     the cross-platform development of security-enabled client and server     applications. Netscape Portable Runtime (NSPR) provides platform     independence for non-GUI operating system facilities.

    A race condition was found in the way NSS verified certain certificates.
    A remote attacker could use this flaw to crash an application using NSS or,     possibly, execute arbitrary code with the privileges of the user running     that application. (CVE-2014-1544)

    A flaw was found in the way TLS False Start was implemented in NSS.
    An attacker could use this flaw to potentially return unencrypted     information from the server. (CVE-2013-1740)

    A race condition was found in the way NSS implemented session ticket     handling as specified by RFC 5077. An attacker could use this flaw to crash     an application using NSS or, in rare cases, execute arbitrary code with the     privileges of the user running that application. (CVE-2014-1490)

    It was found that NSS accepted weak Diffie-Hellman Key exchange (DHKE)     parameters. This could possibly lead to weak encryption being used in     communication between the client and the server. (CVE-2014-1491)

    An out-of-bounds write flaw was found in NSPR. A remote attacker could     potentially use this flaw to crash an application using NSPR or, possibly,     execute arbitrary code with the privileges of the user running that     application. This NSPR flaw was not exposed to web content in any shipped     version of Firefox. (CVE-2014-1545)

    It was found that the implementation of Internationalizing Domain Names in     Applications (IDNA) hostname matching in NSS did not follow the RFC 6125     recommendations. This could lead to certain invalid certificates with     international characters to be accepted as valid. (CVE-2014-1492)

    Red Hat would like to thank the Mozilla project for reporting the     CVE-2014-1544, CVE-2014-1490, CVE-2014-1491, and CVE-2014-1545 issues.
    Upstream acknowledges Tyson Smith and Jesse Schwartzentruber as the     original reporters of CVE-2014-1544, Brian Smith as the original reporter     of CVE-2014-1490, Antoine Delignat-Lavaud and Karthikeyan Bhargavan as the     original reporters of CVE-2014-1491, and Abhishek Arya as the original     reporter of CVE-2014-1545.

    In addition, the nss package has been upgraded to upstream version 3.16.1,     and the nspr package has been upgraded to upstream version 4.10.6. These     updated packages provide a number of bug fixes and enhancements over the     previous versions. (BZ#1112136, BZ#1112135)

    Users of NSS and NSPR are advised to upgrade to these updated packages,     which correct these issues and add these enhancements. After installing     this update, applications using NSS or NSPR must be restarted for this     update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0917 advisory.

    nspr     [4.10.6-1]
    - Rebase to nspr-4.10.6
    - Resolves: rhbz#1112135

    nss     [3.16.1-4.0.1.el6_5]
    - Added nss-vendor.patch to change vendor

    [3.16.1-4]
    - Update some patches on account of the rebase
    - Resolves: Bug 1099619

    [3.16.1-3]
    - Backport nss-3.12.6 upstream fix required by Firefox 31
    - Resolves: Bug 1099619

    [3.16.1-2]
    - Remove two unused patches and apply a needed one that was missed
    - Resolves: Bug 1112136 - Rebase nss in RHEL 6.5.Z to NSS 3.16.1

    [3.16.1-1]
    - Update to nss-3.16.1
    - Resolves: Bug 1112136 - Rebase nss in RHEL 6.5.Z to NSS 3.16.1

    nss-util     [3.15.6-1]
    - Update to nss-3.16.1
    - Resolves: rhbz#1112136

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated nss and nspr packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.

A race condition was found in the way NSS verified certain certificates. A remote attacker could use this flaw to crash an application using NSS or, possibly, execute arbitrary code with the privileges of the user running that application. (CVE-2014-1544)

A flaw was found in the way TLS False Start was implemented in NSS. An attacker could use this flaw to potentially return unencrypted information from the server. (CVE-2013-1740)

A race condition was found in the way NSS implemented session ticket handling as specified by RFC 5077. An attacker could use this flaw to crash an application using NSS or, in rare cases, execute arbitrary code with the privileges of the user running that application.
(CVE-2014-1490)

It was found that NSS accepted weak Diffie-Hellman Key exchange (DHKE) parameters. This could possibly lead to weak encryption being used in communication between the client and the server. (CVE-2014-1491)

An out-of-bounds write flaw was found in NSPR. A remote attacker could potentially use this flaw to crash an application using NSPR or, possibly, execute arbitrary code with the privileges of the user running that application. This NSPR flaw was not exposed to web content in any shipped version of Firefox. (CVE-2014-1545)

It was found that the implementation of Internationalizing Domain Names in Applications (IDNA) hostname matching in NSS did not follow the RFC 6125 recommendations. This could lead to certain invalid certificates with international characters to be accepted as valid.
(CVE-2014-1492)

Red Hat would like to thank the Mozilla project for reporting the CVE-2014-1544, CVE-2014-1490, CVE-2014-1491, and CVE-2014-1545 issues.
Upstream acknowledges Tyson Smith and Jesse Schwartzentruber as the original reporters of CVE-2014-1544, Brian Smith as the original reporter of CVE-2014-1490, Antoine Delignat-Lavaud and Karthikeyan Bhargavan as the original reporters of CVE-2014-1491, and Abhishek Arya as the original reporter of CVE-2014-1545.

In addition, the nss package has been upgraded to upstream version 3.16.1, and the nspr package has been upgraded to upstream version 4.10.6. These updated packages provide a number of bug fixes and enhancements over the previous versions. (BZ#1112136, BZ#1112135)

Users of NSS and NSPR are advised to upgrade to these updated packages, which correct these issues and add these enhancements. After installing this update, applications using NSS or NSPR must be restarted for this update to take effect.

According to its self-reported version, the Oracle iPlanet Web Server (formerly Sun Java System Web Server) running on the remote host is 7.0.x prior to 7.0.20. It is, therefore, affected by the following vulnerabilities in the Network Security Services (NSS) :

  - The implementation of NSS does not ensure that data     structures are initialized, which can result in a denial     of service or disclosure of sensitive information.
    (CVE-2013-1739)

  - An error exists in the ssl_Do1stHandshake() function in     file sslsecur.c due to unencrypted data being returned     from PR_Recv when the TLS False Start feature is     enabled. A man-in-the-middle attacker can exploit this,     by using an arbitrary X.509 certificate, to spoof SSL     servers during certain handshake traffic.
    (CVE-2013-1740)

  - An integer overflow condition exists related to handling     input greater than half the maximum size of the     'PRUint32' value. A remote attacker can exploit this to     cause a denial of service or possibly have other impact.
    (CVE-2013-1741)

  - An error exists in the Null_Cipher() function in the     file ssl3con.c related to handling invalid handshake     packets. A remote attacker, using a crafted request, can     exploit this to execute arbitrary code. (CVE-2013-5605)

  - An error exists in the CERT_VerifyCert() function in the     file certvfy.c when handling trusted certificates with     incompatible key usages. A remote attacker, using a     crafted request, can exploit this to have an invalid     certificates treated as valid. (CVE-2013-5606)

  - A race condition exists in libssl that occurs during     session ticket processing. A remote attacker can exploit     this to cause a denial of service. (CVE-2014-1490)

  - Network Security Services (NSS) does not properly     restrict public values in Diffie-Hellman key exchanges,     allowing a remote attacker to bypass cryptographic     protection mechanisms. (CVE-2014-1491)

  - An issue exists in the Network Security (NSS) library     due to improper handling of IDNA domain prefixes for     wildcard certificates. A man-in-the-middle attacker,     using a crafted certificate, can exploit this to spoof     an SSL server. (CVE-2014-1492)

The remote host has a version of Oracle iPlanet Web Proxy Server (formerly Sun Java System Web Proxy Server) 4.0 prior to 4.0.24. It is, therefore, affected by the following vulnerabilities :

  - The implementation of Network Security Services (NSS)     does not ensure that data structures are initialized,     which could result in a denial of service or disclosure     of sensitive information. (CVE-2013-1739)

  - The implementation of Network Security Services (NSS)     does not properly handle the TLS False Start feature     and could allow man-in-the-middle attacks.
    (CVE-2013-1740)

  - An error exists related to handling input greater than     half the maximum size of the 'PRUint32' value.
    (CVE-2013-1741)

  - An error exists in the 'Null_Cipher' function in the     file 'ssl/ssl3con.c' related to handling invalid     handshake packets that could allow arbitrary code     execution. (CVE-2013-5605)

  - An error exists in the 'CERT_VerifyCert' function in     the file 'lib/certhigh/certvfy.c' that could allow     invalid certificates to be treated as valid.
    (CVE-2013-5606)

  - Network Security Services (NSS) contains a race     condition in libssl that occurs during session ticket     processing. A remote attacker can exploit this flaw     to cause a denial of service. (CVE-2014-1490)

  - Network Security Services (NSS) does not properly     restrict public values in Diffie-Hellman key exchanges,     allowing a remote attacker to bypass cryptographic     protection mechanisms. (CVE-2014-1491)

  - An issue exists in the Network Security (NSS) library     due to improper handling of IDNA domain prefixes for     wildcard certificates. This issue could allow man-in-     the-middle attacks. (CVE-2014-1492)

The version of GlassFish Server running on the remote host is affected by multiple vulnerabilities in the following components :

  - The implementation of Network Security Services (NSS)     does not ensure that data structures are initialized,     which could result in a denial of service or disclosure     of sensitive information. (CVE-2013-1739)

  - The implementation of Network Security Services (NSS)     does not properly handle the TLS False Start feature     and could allow man-in-the-middle attacks.
    (CVE-2013-1740)

  - Network Security Services (NSS) contains an integer     overflow flaw that allows remote attackers to cause a     denial of service. (CVE-2013-1741)

  - An error exists in the 'Null_Cipher' function in the     file 'ssl/ssl3con.c' related to handling invalid     handshake packets that could allow arbitrary code     execution. (CVE-2013-5605)

  - An error exists in the 'CERT_VerifyCert' function in     the file 'lib/certhigh/certvfy.c' that could allow     invalid certificates to be treated as valid.
    (CVE-2013-5606)

  - Oracle Mojarra contains a cross-site scripting     vulnerability due to improperly sanitized     user-supplied input. This allows an attacker to     execute arbitrary script code within the context of     the affected site. (CVE-2013-5855)

  - Network Security Services (NSS) contains a race     condition in libssl that occurs during session ticket     processing. A remote attacker can exploit this flaw     to cause a denial of service. (CVE-2014-1490)

  - Network Security Services (NSS) does not properly     restrict public values in Diffie-Hellman key exchanges,     allowing a remote attacker to bypass cryptographic     protection mechanisms. (CVE-2014-1491)

  - An issue exists in the Network Security (NSS) library     due to improper handling of IDNA domain prefixes for     wildcard certificates. This issue allows man-in-     the-middle attacks. (CVE-2014-1492)

Mozilla Firefox was updated to version 27. Mozilla SeaMonkey was updated to 2.24, fixing similar issues as Firefox 27. Mozilla Thunderbird was updated to 24.3.0, fixing similar issues as Firefox 27.

The Firefox 27 release brings TLS 1.2 support as a major security feature.

It also fixes following security issues :

  - MFSA 2014-01/CVE-2014-1477/CVE-2014-1478 Miscellaneous     memory safety hazards (rv:27.0 / rv:24.3)

  - MFSA 2014-02/CVE-2014-1479 (bmo#911864) Clone protected     content with XBL scopes

  - MFSA 2014-03/CVE-2014-1480 (bmo#916726) UI selection     timeout missing on download prompts

  - MFSA 2014-04/CVE-2014-1482 (bmo#943803) Incorrect use of     discarded images by RasterImage

  - MFSA 2014-05/CVE-2014-1483 (bmo#950427) Information     disclosure with *FromPoint on iframes

  - MFSA 2014-06/CVE-2014-1484 (bmo#953993) Profile path     leaks to Android system log

  - MFSA 2014-07/CVE-2014-1485 (bmo#910139) XSLT stylesheets     treated as styles in Content Security Policy

  - MFSA 2014-08/CVE-2014-1486 (bmo#942164) Use-after-free     with imgRequestProxy and image proccessing

  - MFSA 2014-09/CVE-2014-1487 (bmo#947592) Cross-origin     information leak through web workers

  - MFSA 2014-10/CVE-2014-1489 (bmo#959531) Firefox default     start page UI content invokable by script

  - MFSA 2014-11/CVE-2014-1488 (bmo#950604) Crash when using     web workers with asm.js

  - MFSA 2014-12/CVE-2014-1490/CVE-2014-1491 (bmo#934545,     bmo#930874, bmo#930857) NSS ticket handling issues

  - MFSA 2014-13/CVE-2014-1481(bmo#936056) Inconsistent     JavaScript handling of access to Window objects

Mozilla NSS was updated to 3.15.4 :

  - required for Firefox 27

  - regular CA root store update (1.96)

  - Reordered the cipher suites offered in SSL/TLS client     hello messages to match modern best practices.

  - Improved SSL/TLS false start. In addition to enabling     the SSL_ENABLE_FALSE_START option, an application must     now register a callback using the     SSL_SetCanFalseStartCallback function.

  - When false start is enabled, libssl will sometimes     return unencrypted, unauthenticated data from PR_Recv     (CVE-2013-1740, bmo#919877)

  - MFSA 2014-12/CVE-2014-1490/CVE-2014-1491 NSS ticket     handling issues New functionality

  - Implemented OCSP querying using the HTTP GET method,     which is the new default, and will fall back to the HTTP     POST method.

  - Implemented OCSP server functionality for testing     purposes (httpserv utility).

  - Support SHA-1 signatures with TLS 1.2 client     authentication.

  - Added the --empty-password command-line option to     certutil, to be used with -N: use an empty password when     creating a new database.

  - Added the -w command-line option to pp: don't wrap long     output lines.

Update of the nss, nss-softokn, and nss-util packages to nss-3.15.4, a patch release for NSS 3.15 which includes the following security-relevant bug :

(CVE-2013-1740) When false start is enabled, libssl will sometimes return unencrypted, unauthenticated data from PR_Recv

For further details refer to the nss upstream release notes at

https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.4_release_notes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New mozilla-nss packages are available for Slackware 14.0, 14.1, and
-current to fix a security issue.

Brian Smith discovered that NSS incorrectly handled the TLS False Start feature. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to spoof SSL servers.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A vulnerability has been discovered and corrected in Mozilla NSS :

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic (CVE-2013-1740).

The updated packages have been upgraded to the 3.15.4 version which is not vulnerable to this issue.

ID	Name	Product	Family	Severity
127200	NewStart CGSL CORE 5.04 / MAIN 5.04 : nss Multiple Vulnerabilities (NS-SA-2019-0033)	Nessus	NewStart CGSL Local Security Checks	medium
91202	F5 Networks BIG-IP : Multiple Mozilla NSS vulnerabilities (K16716)	Nessus	F5 Networks Local Security Checks	critical
78774	Oracle OpenSSO Agent Multiple Vulnerabilities (October 2014 CPU)	Nessus	CGI abuses	high
78541	Oracle WebLogic Server Multiple Vulnerabilities (October 2014 CPU)	Nessus	Misc.	high
77993	CentOS 5 : nss (CESA-2014:1246)	Nessus	CentOS Local Security Checks	critical
77955	Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20140916)	Nessus	Scientific Linux Local Security Checks	critical
77739	Oracle Linux 5 : nss / and / nspr (ELSA-2014-1246)	Nessus	Oracle Linux Local Security Checks	critical
77699	RHEL 5 : nss and nspr (RHSA-2014:1246)	Nessus	Red Hat Local Security Checks	critical
76938	Oracle Traffic Director Multiple Vulnerabilities (July 2014 CPU)	Nessus	Misc.	high
76702	Scientific Linux Security Update : nss and nspr on SL6.x i386/x86_64 (20140722)	Nessus	Scientific Linux Local Security Checks	critical
76698	RHEL 6 : nss and nspr (RHSA-2014:0917)	Nessus	Red Hat Local Security Checks	critical
76694	Oracle Linux 6 : nss / and / nspr (ELSA-2014-0917)	Nessus	Oracle Linux Local Security Checks	critical
76686	CentOS 6 : nspr / nss / nss-util (CESA-2014:0917)	Nessus	CentOS Local Security Checks	critical
76593	Oracle iPlanet Web Server 7.0.x < 7.0.20 Multiple Vulnerabilities	Nessus	Web Servers	high
76592	Oracle iPlanet Web Proxy Server 4.0 < 4.0.24 Multiple Vulnerabilities	Nessus	Windows	high
76591	Oracle GlassFish Server Multiple Vulnerabilities (July 2014 CPU)	Nessus	Web Servers	high
75253	openSUSE Security Update : firefox / seamonkey / thunderbird (openSUSE-SU-2014:0212-1)	Nessus	SuSE Local Security Checks	critical
72269	Fedora 19 : nss-3.15.4-1.fc19 / nss-softokn-3.15.4-1.fc19 / nss-util-3.15.4-1.fc19 (2014-1100)	Nessus	Fedora Local Security Checks	medium
72188	Slackware 14.0 / 14.1 / current : mozilla-nss (SSA:2014-028-02)	Nessus	Slackware Local Security Checks	medium
72116	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : nss vulnerability (USN-2088-1)	Nessus	Ubuntu Local Security Checks	medium
72056	Mandriva Linux Security Advisory : nss (MDVSA-2014:012)	Nessus	Mandriva Local Security Checks	medium
72050	Fedora 20 : nss-3.15.4-1.fc20 / nss-softokn-3.15.4-1.fc20 / nss-util-3.15.4-1.fc20 (2014-1120)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2013-1740

high

Tenable Plugins

medium

critical

high

high

critical

critical

critical

critical

high

critical

critical

critical

critical

high

high

high

critical

medium

medium

medium

medium

medium