7.5

CVE-2004-0826

Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.

Data is provided by the National Vulnerability Database (NVD)
Netscape ≫ Certificate Server Version1.0 Updatepatch1
Netscape ≫ Certificate Server Version4.2
Netscape ≫ Directory Server Version1.3 Updatepatch5
Netscape ≫ Directory Server Version3.1 Updatepatch1
Netscape ≫ Directory Server Version3.12
Netscape ≫ Directory Server Version4.1
Netscape ≫ Directory Server Version4.11
Netscape ≫ Directory Server Version4.13
Netscape ≫ Enterprise Server Version2.0
Netscape ≫ Enterprise Server Version2.0.1c
Netscape ≫ Enterprise Server Version2.0a
Netscape ≫ Enterprise Server Version3.0
Netscape ≫ Enterprise Server Version3.0.1
Netscape ≫ Enterprise Server Version3.0.1b
Netscape ≫ Enterprise Server Version3.0.7a Editionnetware
Netscape ≫ Enterprise Server Version3.0l
Netscape ≫ Enterprise Server Version3.1
Netscape ≫ Enterprise Server Version3.2
Netscape ≫ Enterprise Server Version3.3
Netscape ≫ Enterprise Server Version3.4
Netscape ≫ Enterprise Server Version3.5
Netscape ≫ Enterprise Server Version3.5 Editionsolaris
Netscape ≫ Enterprise Server Version3.5.1
Netscape ≫ Enterprise Server Version3.6
Netscape ≫ Enterprise Server Version3.6 Editionsolaris
Netscape ≫ Enterprise Server Version3.6 Updatesp1
Netscape ≫ Enterprise Server Version3.6 Updatesp2
Netscape ≫ Enterprise Server Version3.6 Updatesp3
Netscape ≫ Enterprise Server Version4.0
Netscape ≫ Enterprise Server Version4.1 Updatesp3
Netscape ≫ Enterprise Server Version4.1 Updatesp4
Netscape ≫ Enterprise Server Version4.1 Updatesp5
Netscape ≫ Enterprise Server Version4.1 Updatesp6
Netscape ≫ Enterprise Server Version4.1 Updatesp7
Netscape ≫ Enterprise Server Version4.1 Updatesp8
Netscape ≫ Enterprise Server Version4.1.1 Editionnetware
Netscape ≫ Enterprise Server Version5.0 Editionnetware
Sun ≫ Java Enterprise System Version2003q4
Sun ≫ Java Enterprise System Version2004q2
Sun ≫ Java System Application Server Version7.0 Editionenterprise
Sun ≫ Java System Application Server Version7.0 Editionplatform
Sun ≫ Java System Application Server Version7.0 Editionstandard
Sun ≫ Java System Application Server Version7.0 Updateur4
Sun ≫ One Application Server Version6.0
Sun ≫ One Application Server Version6.0 Updatesp1
Sun ≫ One Application Server Version6.0 Updatesp2
Sun ≫ One Web Server Version4.1
Sun ≫ One Web Server Version4.1 Updatesp1
Sun ≫ One Web Server Version4.1 Updatesp10
Sun ≫ One Web Server Version4.1 Updatesp11
Sun ≫ One Web Server Version4.1 Updatesp12
Sun ≫ One Web Server Version4.1 Updatesp13
Sun ≫ One Web Server Version4.1 Updatesp14
Sun ≫ One Web Server Version4.1 Updatesp2
Sun ≫ One Web Server Version4.1 Updatesp3
Sun ≫ One Web Server Version4.1 Updatesp4
Sun ≫ One Web Server Version4.1 Updatesp5
Sun ≫ One Web Server Version4.1 Updatesp6
Sun ≫ One Web Server Version4.1 Updatesp7
Sun ≫ One Web Server Version4.1 Updatesp8
Sun ≫ One Web Server Version4.1 Updatesp9
Sun ≫ One Web Server Version6.0 Updatesp3
Sun ≫ One Web Server Version6.0 Updatesp4
Sun ≫ One Web Server Version6.0 Updatesp5
Sun ≫ One Web Server Version6.0 Updatesp7
Sun ≫ One Web Server Version6.0 Updatesp8
Sun ≫ One Web Server Version6.1
Sun ≫ One Web Server Version6.1 Updatesp1
Sun ≫ One Web Server Version6.1 Updatesp2
Hp ≫ Hp-ux Version11.00
Hp ≫ Hp-ux Version11.11
Hp ≫ Hp-ux Version11.23 Editionia64_64-bit
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3% 0.853
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P