The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2866-1 advisory.

    Karthikeyan Bhargavan and Gaetan Leurent discovered that NSS incorrectly allowed MD5 to be used for TLS     1.2 connections. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could     be exploited to view sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS : Firefox vulnerability (USN-2866-1)

high Nessus Plugin ID 87846

Version 2.20

Version 2.18

Version 2.17

Version 2.20 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354
Version 2.18 Oct 23, 2023, 6:27 PM CVSSv2 score source (set to "CVE-2015-7575") Detection Exploit attributes ("Exploit available" set to "False") Plugin metadata Plugin Feed: 202310231827
Version 2.17 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x) Plugin Feed: 202301180901