oval:org.mitre.oval:def:11007

Definition Id: oval:org.mitre.oval:def:11007

Oval ID:	oval:org.mitre.oval:def:11007
Title:	Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.
Description:	Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2006-4340	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.5-0.1.el3 AND seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el3 AND seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el3 AND seamonkey is earlier than 0:1.0.5-0.1.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el3 AND seamonkey-mail is earlier than 0:1.0.5-0.1.el3 AND seamonkey-chat is earlier than 0:1.0.5-0.1.el3 AND seamonkey-devel is earlier than 0:1.0.5-0.1.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el3 AND seamonkey-nss is earlier than 0:1.0.5-0.1.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section devhelp-devel is earlier than 0:0.10-0.4.el4 AND seamonkey-nspr is earlier than 0:1.0.5-0.1.el4 AND seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el4 AND thunderbird is earlier than 0:1.5.0.7-0.1.el4 AND seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el4 AND seamonkey is earlier than 0:1.0.5-0.1.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el4 AND devhelp is earlier than 0:0.10-0.4.el4 AND firefox is earlier than 0:1.5.0.7-0.1.el4 AND seamonkey-mail is earlier than 0:1.0.5-0.1.el4 AND seamonkey-chat is earlier than 0:1.0.5-0.1.el4 AND seamonkey-nss is earlier than 0:1.0.5-0.1.el4 AND seamonkey-devel is earlier than 0:1.0.5-0.1.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el4

Definition Id: oval:org.mitre.oval:def:16636

Oval ID:	oval:org.mitre.oval:def:16636
Title:	CentOS Linux 4.x
Description:	The operating system installed on the system is CentOS Linux 4.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:4	Version:	3
Platform(s):	CentOS Linux 4	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 4.x is installed
Referenced By:
oval:org.mitre.oval:def:11007

Definition Id: oval:org.mitre.oval:def:11831

Oval ID:	oval:org.mitre.oval:def:11831
Title:	The operating system installed on the system is Red Hat Enterprise Linux 4
Description:	The operating system installed on the system is Red Hat Enterprise Linux 4.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:4	Version:	7
Platform(s):	Red Hat Enterprise Linux 4	Product(s):
Definition Synopsis:
Red Hat Enterprise 4 is installed
Referenced By:
oval:org.mitre.oval:def:11007

Definition Id: oval:org.mitre.oval:def:16651

Oval ID:	oval:org.mitre.oval:def:16651
Title:	CentOS Linux 3.x
Description:	The operating system installed on the system is CentOS Linux 3.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:3	Version:	3
Platform(s):	CentOS Linux 3	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 3.x is installed
Referenced By:
oval:org.mitre.oval:def:11007

Definition Id: oval:org.mitre.oval:def:15990

Oval ID:	oval:org.mitre.oval:def:15990
Title:	Oracle Linux 4.x
Description:	The operating system installed on the system is Oracle Linux 4.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:4	Version:	5
Platform(s):	Oracle Linux 4	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 4.x is installed
Referenced By:
oval:org.mitre.oval:def:11007

Definition Id: oval:org.mitre.oval:def:11782

Oval ID:	oval:org.mitre.oval:def:11782
Title:	The operating system installed on the system is Red Hat Enterprise Linux 3
Description:	The operating system installed on the system is Red Hat Enterprise Linux 3.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:3	Version:	7
Platform(s):	Red Hat Enterprise Linux 3	Product(s):
Definition Synopsis:
Red Hat Enterprise 3 is installed
Referenced By:
oval:org.mitre.oval:def:11007

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0323s

Facebook rss twitter linkedin mail