CVE-2004-0826 Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
HighCVSS 7.5
EPSS 22.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla network security services | = 3.2 | No fix listed |
| mozilla network security services | = 3.2.1 | No fix listed |
| mozilla network security services | = 3.3 | No fix listed |
| mozilla network security services | = 3.3.1 | No fix listed |
| mozilla network security services | = 3.3.2 | No fix listed |
| mozilla network security services | = 3.4 | No fix listed |
| mozilla network security services | = 3.4.1 | No fix listed |
| mozilla network security services | = 3.4.2 | No fix listed |
| mozilla network security services | = 3.5 | No fix listed |
| mozilla network security services | = 3.6 | No fix listed |
| mozilla network security services | = 3.6.1 | No fix listed |
| mozilla network security services | = 3.7 | No fix listed |
| mozilla network security services | = 3.7.1 | No fix listed |
| mozilla network security services | = 3.7.2 | No fix listed |
| mozilla network security services | = 3.7.3 | No fix listed |
| mozilla network security services | = 3.7.5 | No fix listed |
| mozilla network security services | = 3.7.7 | No fix listed |
| mozilla network security services | = 3.8 | No fix listed |
| mozilla network security services | = 3.9 | No fix listed |
| netscape certificate server | = 1.0-patch1 | No fix listed |
| netscape certificate server | = 4.2 | No fix listed |
| netscape directory server | = 1.3-patch5 | No fix listed |
| netscape directory server | = 3.1-patch1 | No fix listed |
| netscape directory server | = 3.12 | No fix listed |
| netscape directory server | = 4.1 | No fix listed |
Show 64 more
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape directory server | = 4.11 | No fix listed |
| netscape directory server | = 4.13 | No fix listed |
| netscape enterprise server | = 2.0 | No fix listed |
| netscape enterprise server | = 2.0.1c | No fix listed |
| netscape enterprise server | = 2.0a | No fix listed |
| netscape enterprise server | = 3.0 | No fix listed |
| netscape enterprise server | = 3.0.1 | No fix listed |
| netscape enterprise server | = 3.0.1b | No fix listed |
| netscape enterprise server | = 3.0.7a | No fix listed |
| netscape enterprise server | = 3.0l | No fix listed |
| netscape enterprise server | = 3.1 | No fix listed |
| netscape enterprise server | = 3.2 | No fix listed |
| netscape enterprise server | = 3.3 | No fix listed |
| netscape enterprise server | = 3.4 | No fix listed |
| netscape enterprise server | = 3.5 | No fix listed |
| netscape enterprise server | = 3.5.1 | No fix listed |
| netscape enterprise server | = 3.6 | No fix listed |
| netscape enterprise server | = 3.6-sp1 | No fix listed |
| netscape enterprise server | = 3.6-sp2 | No fix listed |
| netscape enterprise server | = 3.6-sp3 | No fix listed |
| netscape enterprise server | = 4.0 | No fix listed |
| netscape enterprise server | = 4.1-sp3 | No fix listed |
| netscape enterprise server | = 4.1-sp4 | No fix listed |
| netscape enterprise server | = 4.1-sp5 | No fix listed |
| netscape enterprise server | = 4.1-sp6 | No fix listed |
| netscape enterprise server | = 4.1-sp7 | No fix listed |
| netscape enterprise server | = 4.1-sp8 | No fix listed |
| netscape enterprise server | = 4.1.1 | No fix listed |
| netscape enterprise server | = 5.0 | No fix listed |
| netscape personalization engine | All versions | No fix listed |
| sun java enterprise system | = 2003q4 | No fix listed |
| sun java enterprise system | = 2004q2 | No fix listed |
| sun java system application server | = 7.0 | No fix listed |
| sun java system application server | = 7.0-ur4 | No fix listed |
| sun java system application server | = 7.1 | No fix listed |
| sun one application server | = 6.0 | No fix listed |
| sun one application server | = 6.0-sp1 | No fix listed |
| sun one application server | = 6.0-sp2 | No fix listed |
| sun one web server | = 4.1 | No fix listed |
| sun one web server | = 4.1-sp1 | No fix listed |
| sun one web server | = 4.1-sp10 | No fix listed |
| sun one web server | = 4.1-sp11 | No fix listed |
| sun one web server | = 4.1-sp12 | No fix listed |
| sun one web server | = 4.1-sp13 | No fix listed |
| sun one web server | = 4.1-sp14 | No fix listed |
| sun one web server | = 4.1-sp2 | No fix listed |
| sun one web server | = 4.1-sp3 | No fix listed |
| sun one web server | = 4.1-sp4 | No fix listed |
| sun one web server | = 4.1-sp5 | No fix listed |
| sun one web server | = 4.1-sp6 | No fix listed |
| sun one web server | = 4.1-sp7 | No fix listed |
| sun one web server | = 4.1-sp8 | No fix listed |
| sun one web server | = 4.1-sp9 | No fix listed |
| sun one web server | = 6.0-sp3 | No fix listed |
| sun one web server | = 6.0-sp4 | No fix listed |
| sun one web server | = 6.0-sp5 | No fix listed |
| sun one web server | = 6.0-sp7 | No fix listed |
| sun one web server | = 6.0-sp8 | No fix listed |
| sun one web server | = 6.1 | No fix listed |
| sun one web server | = 6.1-sp1 | No fix listed |
| sun one web server | = 6.1-sp2 | No fix listed |
| HP Inc hp-ux | = 11.00 | No fix listed |
| HP Inc hp-ux | = 11.11 | No fix listed |
| HP Inc hp-ux | = 11.23 | No fix listed |
References
- SSRT4779 vendor-advisory
- 11015 patch vdb-entry
- 20040823 Netscape NSS Library Remote Compromise patch third-party-advisory vendor-advisory
- sslv2-client-hello-overflow(16314) vdb-entry