5.8

CVE-2013-1740

Exploit

EPSS 1.93%
Veröffentlicht 18.01.2014 22:55:03
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 20

NVD 47 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Network Security Services Version <= 3.15.3

Mozilla ≫ Network Security Services Version 3.2

Mozilla ≫ Network Security Services Version 3.2.1

Mozilla ≫ Network Security Services Version 3.3

Mozilla ≫ Network Security Services Version 3.3.1

Mozilla ≫ Network Security Services Version 3.3.2

Mozilla ≫ Network Security Services Version 3.4

Mozilla ≫ Network Security Services Version 3.4.1

Mozilla ≫ Network Security Services Version 3.4.2

Mozilla ≫ Network Security Services Version 3.5

Mozilla ≫ Network Security Services Version 3.6

Mozilla ≫ Network Security Services Version 3.6.1

Mozilla ≫ Network Security Services Version 3.7

Mozilla ≫ Network Security Services Version 3.7.1

Mozilla ≫ Network Security Services Version 3.7.2

Mozilla ≫ Network Security Services Version 3.7.3

Mozilla ≫ Network Security Services Version 3.7.5

Mozilla ≫ Network Security Services Version 3.7.7

Mozilla ≫ Network Security Services Version 3.8

Mozilla ≫ Network Security Services Version 3.9

Mozilla ≫ Network Security Services Version 3.11.2

Mozilla ≫ Network Security Services Version 3.11.3

Mozilla ≫ Network Security Services Version 3.11.4

Mozilla ≫ Network Security Services Version 3.11.5

Mozilla ≫ Network Security Services Version 3.12

Mozilla ≫ Network Security Services Version 3.12.1

Mozilla ≫ Network Security Services Version 3.12.2

Mozilla ≫ Network Security Services Version 3.12.3

Mozilla ≫ Network Security Services Version 3.12.3.1

Mozilla ≫ Network Security Services Version 3.12.3.2

Mozilla ≫ Network Security Services Version 3.12.4

Mozilla ≫ Network Security Services Version 3.12.5

Mozilla ≫ Network Security Services Version 3.12.6

Mozilla ≫ Network Security Services Version 3.12.7

Mozilla ≫ Network Security Services Version 3.12.8

Mozilla ≫ Network Security Services Version 3.12.9

Mozilla ≫ Network Security Services Version 3.12.10

Mozilla ≫ Network Security Services Version 3.12.11

Mozilla ≫ Network Security Services Version 3.14

Mozilla ≫ Network Security Services Version 3.14.1

Mozilla ≫ Network Security Services Version 3.14.2

Mozilla ≫ Network Security Services Version 3.14.3

Mozilla ≫ Network Security Services Version 3.14.4

Mozilla ≫ Network Security Services Version 3.14.5

Mozilla ≫ Network Security Services Version 3.15

Mozilla ≫ Network Security Services Version 3.15.1

Mozilla ≫ Network Security Services Version 3.15.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.93%	0.774

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

http://seclists.org/fulldisclosure/2014/Dec/23

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

http://www.securityfocus.com/archive/1/534161/100/0/threaded

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html

http://www.securityfocus.com/bid/64944

http://www.ubuntu.com/usn/USN-2088-1

https://bugs.gentoo.org/show_bug.cgi?id=498172

https://bugzilla.mozilla.org/show_bug.cgi?id=919877

Exploit

https://bugzilla.redhat.com/show_bug.cgi?id=1053725

https://developer.mozilla.org/docs/NSS/NSS_3.15.4_release_notes

https://exchange.xforce.ibmcloud.com/vulnerabilities/90394

https://nvd.nist.gov/vuln/detail/CVE-2013-1740

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-1740

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-1740

EUVD