5.8
CVE-2013-1740
- EPSS 1.05%
- Veröffentlicht 18.01.2014 22:55:03
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle security@mozilla.org
- CVE-Watchlists
- Unerledigt
LoginThe ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Network Security Services Version <= 3.15.3
Mozilla ≫ Network Security Services Version3.2
Mozilla ≫ Network Security Services Version3.2.1
Mozilla ≫ Network Security Services Version3.3
Mozilla ≫ Network Security Services Version3.3.1
Mozilla ≫ Network Security Services Version3.3.2
Mozilla ≫ Network Security Services Version3.4
Mozilla ≫ Network Security Services Version3.4.1
Mozilla ≫ Network Security Services Version3.4.2
Mozilla ≫ Network Security Services Version3.5
Mozilla ≫ Network Security Services Version3.6
Mozilla ≫ Network Security Services Version3.6.1
Mozilla ≫ Network Security Services Version3.7
Mozilla ≫ Network Security Services Version3.7.1
Mozilla ≫ Network Security Services Version3.7.2
Mozilla ≫ Network Security Services Version3.7.3
Mozilla ≫ Network Security Services Version3.7.5
Mozilla ≫ Network Security Services Version3.7.7
Mozilla ≫ Network Security Services Version3.8
Mozilla ≫ Network Security Services Version3.9
Mozilla ≫ Network Security Services Version3.11.2
Mozilla ≫ Network Security Services Version3.11.3
Mozilla ≫ Network Security Services Version3.11.4
Mozilla ≫ Network Security Services Version3.11.5
Mozilla ≫ Network Security Services Version3.12
Mozilla ≫ Network Security Services Version3.12.1
Mozilla ≫ Network Security Services Version3.12.2
Mozilla ≫ Network Security Services Version3.12.3
Mozilla ≫ Network Security Services Version3.12.3.1
Mozilla ≫ Network Security Services Version3.12.3.2
Mozilla ≫ Network Security Services Version3.12.4
Mozilla ≫ Network Security Services Version3.12.5
Mozilla ≫ Network Security Services Version3.12.6
Mozilla ≫ Network Security Services Version3.12.7
Mozilla ≫ Network Security Services Version3.12.8
Mozilla ≫ Network Security Services Version3.12.9
Mozilla ≫ Network Security Services Version3.12.10
Mozilla ≫ Network Security Services Version3.12.11
Mozilla ≫ Network Security Services Version3.14
Mozilla ≫ Network Security Services Version3.14.1
Mozilla ≫ Network Security Services Version3.14.2
Mozilla ≫ Network Security Services Version3.14.3
Mozilla ≫ Network Security Services Version3.14.4
Mozilla ≫ Network Security Services Version3.14.5
Mozilla ≫ Network Security Services Version3.15
Mozilla ≫ Network Security Services Version3.15.1
Mozilla ≫ Network Security Services Version3.15.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.05% | 0.766 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|