Lucene search
UbuntuUSN-927-6HistoryJul 23, 2010 - 12:00 a.m.
NSS vulnerability
2010-07-2300:00:00
ubuntu.com
68
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.004
Percentile
72.6%
Releases
- Ubuntu 9.04
Packages
- nss - Network Security Service libraries
Details
USN-927-1 fixed vulnerabilities in NSS on Ubuntu 9.10. This update provides the
corresponding updates for Ubuntu 9.04.
Original advisory details:
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3
protocols. If an attacker could perform a machine-in-the-middle attack at the
start of a TLS connection, the attacker could inject arbitrary content at
the beginning of the user’s session. This update adds support for the new
new renegotiation extension and will use it when the server supports it.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 9.04 | noarch | libnss3-1d | < 3.12.6-0ubuntu0.9.04.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libnss3-0d | < 3.12.6-0ubuntu0.9.04.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libnss3-1d-dbg | < 3.12.6-0ubuntu0.9.04.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libnss3-dev | < 3.12.6-0ubuntu0.9.04.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libnss3-tools | < 3.12.6-0ubuntu0.9.04.1 | UNKNOWN |
References
Related
openvas
openvas
SLES11: Security update for libopenssl
2009-11-17 00:00:00
Ubuntu: Security Advisory (USN-927-6)
2010-07-26 00:00:00
Microsoft Windows TLS/SSL Spoofing Vulnerability (977377)
2010-02-11 00:00:00
nessus
nessus
openSUSE Security Update : libopenssl-devel (libopenssl-devel-1554)
2009-11-19 00:00:00
SuSE 11 Security Update : OpenSSL (SAT Patch Number 1544)
2009-11-17 00:00:00
openSUSE Security Update : compat-openssl097g (compat-openssl097g-1548)
2009-11-18 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: nss-util-3.12.5-1.fc12.1
2009-12-10 04:13:15
[SECURITY] Fedora 12 Update: nss-3.12.6-1.2.fc12
2010-03-12 04:18:37
[SECURITY] Fedora 12 Update: gnutls-2.8.6-2.fc12
2010-06-25 18:15:19
securityvulns
securityvulns
[ MDVSA-2009:337 ] proftpd
2009-12-22 00:00:00
SSL data injection
2010-02-10 00:00:00
[ MDVSA-2009:295 ] apache
2009-11-09 00:00:00
fortinet
fortinet
FortiOS SSL Deep-Inspection possible Insecure Renegotiation
2017-11-03 00:00:00
debian
debian
[SECURITY] [DSA-2141-4] New lighttpd packages fix regression
2011-01-12 18:51:18
[SECURITY] [DSA-2141-2] New nss packages fix protocol design flaw
2011-01-05 23:20:31
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:36:56
cvelist
cvelist
CVE-2009-3555
2009-11-09 17:00:00
ubuntu
ubuntu
nss vulnerability
2010-06-29 00:00:00
Apache vulnerability
2010-09-21 00:00:00
NSS vulnerability
2010-04-09 00:00:00
redhat
redhat
(RHSA-2010:0155) Moderate: java-1.4.2-ibm security and bug fix update
2010-03-17 00:00:00
(RHSA-2010:0164) Moderate: openssl097a security update
2010-03-25 00:00:00
(RHSA-2010:0165) Moderate: nss security update
2010-03-25 00:00:00
suse
suse
man-in-the-middle attack in openssl
2009-11-18 09:50:39
hackerone
hackerone
LocalTapiola: Secure Client-Initiated Renegotiation
2017-12-27 15:57:52
Slack: TLS1/SSLv3 Renegotiation Vulnerability
2014-04-02 13:01:00
mozilla
mozilla
Update NSS to support TLS renegotiation indication — Mozilla
2010-03-30 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 0.9.8l-alt1
2009-11-07 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8l-alt1
2009-11-07 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 0.9.8l-alt1
2009-11-07 00:00:00
cve
cve
CVE-2009-3555
2009-11-09 17:30:00
seebug
seebug
ProFTPD TLS会话重协商明文数据注入漏洞
2009-12-15 00:00:00
TLS Renegotiation Vulnerability PoC Exploit
2009-12-21 00:00:00
exploitdb
exploitdb
Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass
2009-11-10 00:00:00
TLS - Renegotiation
2009-12-21 00:00:00
cisco
cisco
Transport Layer Security Renegotiation Vulnerability
2009-11-09 13:00:00
slackware
slackware
openssl
2009-11-16 13:42:36
nvd
nvd
CVE-2009-3555
2009-11-09 17:30:00
centos
centos
nspr, nss security update
2010-03-28 15:36:50
openssl097a security update
2010-03-27 17:44:36
oraclelinux
oraclelinux
openssl097a security update
2010-03-25 00:00:00
nss security update
2010-03-25 00:00:00
checkpoint_advisories
checkpoint_advisories
TLS Client Initiated Renegotiation (CVE-2009-3555)
2009-11-23 00:00:00
Preemptive Protection against TLS and SSL Spoofing Vulnerability
2010-02-09 00:00:00
TLS Renegotiation (CVE-2009-3555)
2009-11-22 00:00:00
ibm
ibm
nginx
nginx
The renegotiation vulnerability in SSL protocol
2009-11-09 17:30:00
github
github
Apache Tomcat affected by vulnerability in TLS and SSL protocol
2022-05-02 03:46:22
zdt
zdt
TLS Renegotiation Vulnerability PoC Exploit
2009-12-21 00:00:00
ubuntucve
ubuntucve
CVE-2009-3555
2009-11-09 00:00:00
osv
osv
Apache Tomcat affected by vulnerability in TLS and SSL protocol
2022-05-02 03:46:22
openssl
openssl
Vulnerability in OpenSSL CVE-2009-3555
2009-11-05 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:15.ssl
2009-12-03 00:00:00
debiancve
debiancve
CVE-2009-3555
2009-11-09 17:30:00
exploitpack
exploitpack
TLS - Renegotiation
2009-12-21 00:00:00
prion
prion
Cross site request forgery (csrf)
2009-11-09 17:30:00
packetstorm
packetstorm
TLS Renegotiation Exploit
2009-12-21 00:00:00
cert
cert
SSL and TLS protocols renegotiation vulnerability
2009-11-11 00:00:00
f5
f5
K10737 : SSL Renegotiation vulnerability - CVE-2009-3555 / VU#120541
2013-07-05 00:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.004
Percentile
72.6%
Related for USN-927-6