N/A - CVE-2013-0743

Executive Summary

Informations
Name	CVE-2013-0743	First vendor Publication	2013-01-25
Vendor	Cve	Last vendor Modification	2023-11-07

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score	Not Defined	Attack Range	Not Defined
Cvss Impact Score	Not Defined	Attack Complexity	Not Defined
Cvss Expoit Score	Not Defined	Authentication	Not Defined
Calculate full CVSS 2.0 Vectors scores

Detail

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA at the suggestion of the CVE project team. The candidate had been associated with a correct report of a security problem, but not a problem that is categorized as a vulnerability within CVE. Compromised or unauthorized SSL certificates are not within CVE's scope. Notes: none

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0743

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:17859

Oval ID:	oval:org.mitre.oval:def:17859
Title:	USN-1687-1 -- nss vulnerability
Description:	Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet.
Family:	unix	Class:	patch
Reference(s):	USN-1687-1 CVE-2013-0743	Version:	7
Platform(s):	Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04	Product(s):	nss
Definition Synopsis:
Release section Ubuntu 12.10 is installed AND libnss3-1d DPKG is earlier than 3.14.1-0ckbi1.93ubuntu.0.12.10.1 AND Release section Ubuntu 12.04 is installed AND libnss3-1d DPKG is earlier than 3.14.1-0ckbi1.93ubuntu.0.12.04.1 AND Release section Ubuntu 11.10 is installed AND libnss3-1d DPKG is earlier than 3.14.1-0ckbi1.93ubuntu.0.11.10.1 AND Release section Ubuntu 10.04 is installed AND libnss3-1d DPKG is earlier than 3.14.1-0ckbi1.93ubuntu.0.10.04.1

Definition Id: oval:org.mitre.oval:def:17950

Oval ID:	oval:org.mitre.oval:def:17950
Title:	USN-1681-2 -- thunderbird vulnerabilities
Description:	Several security issues were fixed in Thunderbird.
Family:	unix	Class:	patch
Reference(s):	USN-1681-2 CVE-2013-0769 CVE-2013-0749 CVE-2013-0770 CVE-2013-0760 CVE-2013-0761 CVE-2013-0762 CVE-2013-0763 CVE-2013-0766 CVE-2013-0767 CVE-2013-0771 CVE-2012-5829 CVE-2013-0768 CVE-2013-0759 CVE-2013-0744 CVE-2013-0764 CVE-2013-0745 CVE-2013-0746 CVE-2013-0747 CVE-2013-0748 CVE-2013-0750 CVE-2013-0752 CVE-2013-0757 CVE-2013-0758 CVE-2013-0753 CVE-2013-0754 CVE-2013-0755 CVE-2013-0756 CVE-2013-0743	Version:	7
Platform(s):	Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04	Product(s):	thunderbird
Definition Synopsis:
Release section Ubuntu 12.10 is installed AND thunderbird DPKG is earlier than 17.0.2+build1-0ubuntu0.12.10.1 AND Release section Ubuntu 12.04 is installed AND thunderbird DPKG is earlier than 17.0.2+build1-0ubuntu0.12.04.1 AND Release section Ubuntu 11.10 is installed AND thunderbird DPKG is earlier than 17.0.2+build1-0ubuntu0.11.10.1 AND Release section Ubuntu 10.04 is installed AND thunderbird DPKG is earlier than 17.0.2+build1-0ubuntu0.10.04.1

Definition Id: oval:org.mitre.oval:def:17969

Oval ID:	oval:org.mitre.oval:def:17969
Title:	USN-1687-2 -- nspr update
Description:	NSPR update to work with the new NSS.
Family:	unix	Class:	patch
Reference(s):	USN-1687-2 CVE-2013-0743	Version:	7
Platform(s):	Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04	Product(s):	nspr
Definition Synopsis:
Release section Ubuntu 12.10 is installed AND libnspr4-0d DPKG is earlier than 4.9.4-0ubuntu0.12.10.1 AND Release section Ubuntu 12.04 is installed AND libnspr4-0d DPKG is earlier than 4.9.4-0ubuntu0.12.04.1 AND Release section Ubuntu 11.10 is installed AND libnspr4-0d DPKG is earlier than 4.9.4-0ubuntu0.11.10.1 AND Release section Ubuntu 10.04 is installed AND libnspr4-0d DPKG is earlier than 4.9.4-0ubuntu0.10.04.1

Definition Id: oval:org.mitre.oval:def:18149

Oval ID:	oval:org.mitre.oval:def:18149
Title:	USN-1681-3 -- firefox regression
Description:	USN-1681-1 introduced a regression in Firefox.
Family:	unix	Class:	patch
Reference(s):	USN-1681-3 CVE-2013-0769 CVE-2013-0749 CVE-2013-0770 CVE-2013-0760 CVE-2013-0761 CVE-2013-0762 CVE-2013-0763 CVE-2013-0766 CVE-2013-0767 CVE-2013-0771 CVE-2012-5829 CVE-2013-0768 CVE-2013-0759 CVE-2013-0744 CVE-2013-0764 CVE-2013-0745 CVE-2013-0746 CVE-2013-0747 CVE-2013-0748 CVE-2013-0750 CVE-2013-0752 CVE-2013-0757 CVE-2013-0758 CVE-2013-0753 CVE-2013-0754 CVE-2013-0755 CVE-2013-0756 CVE-2013-0743	Version:	7
Platform(s):	Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04	Product(s):	firefox
Definition Synopsis:
Release section Ubuntu 12.10 is installed AND firefox DPKG is earlier than 18.0.1+build1-0ubuntu0.12.10.1 AND Release section Ubuntu 12.04 is installed AND firefox DPKG is earlier than 18.0.1+build1-0ubuntu0.12.04.1 AND Release section Ubuntu 11.10 is installed AND firefox DPKG is earlier than 18.0.1+build1-0ubuntu0.11.10.1 AND Release section Ubuntu 10.04 is installed AND firefox DPKG is earlier than 18.0.1+build1-0ubuntu0.10.04.1

Definition Id: oval:org.mitre.oval:def:18249

Oval ID:	oval:org.mitre.oval:def:18249
Title:	USN-1681-1 -- firefox vulnerabilities
Description:	Several security issues were fixed in Firefox.
Family:	unix	Class:	patch
Reference(s):	USN-1681-1 CVE-2013-0769 CVE-2013-0749 CVE-2013-0770 CVE-2013-0760 CVE-2013-0761 CVE-2013-0762 CVE-2013-0763 CVE-2013-0766 CVE-2013-0767 CVE-2013-0771 CVE-2012-5829 CVE-2013-0768 CVE-2013-0759 CVE-2013-0744 CVE-2013-0764 CVE-2013-0745 CVE-2013-0746 CVE-2013-0747 CVE-2013-0748 CVE-2013-0750 CVE-2013-0752 CVE-2013-0757 CVE-2013-0758 CVE-2013-0753 CVE-2013-0754 CVE-2013-0755 CVE-2013-0756 CVE-2013-0743	Version:	7
Platform(s):	Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04	Product(s):	firefox
Definition Synopsis:
Release section Ubuntu 12.10 is installed AND firefox DPKG is earlier than 18.0+build1-0ubuntu0.12.10.3 AND Release section Ubuntu 12.04 is installed AND firefox DPKG is earlier than 18.0+build1-0ubuntu0.12.04.3 AND Release section Ubuntu 11.10 is installed AND firefox DPKG is earlier than 18.0+build1-0ubuntu0.11.10.3 AND Release section Ubuntu 10.04 is installed AND firefox DPKG is earlier than 18.0+build1-0ubuntu0.10.04.3

Definition Id: oval:org.mitre.oval:def:18290

Oval ID:	oval:org.mitre.oval:def:18290
Title:	USN-1681-4 -- firefox regression
Description:	USN-1681-1 introduced a regression in Firefox.
Family:	unix	Class:	patch
Reference(s):	USN-1681-4 CVE-2013-0769 CVE-2013-0749 CVE-2013-0770 CVE-2013-0760 CVE-2013-0761 CVE-2013-0762 CVE-2013-0763 CVE-2013-0766 CVE-2013-0767 CVE-2013-0771 CVE-2012-5829 CVE-2013-0768 CVE-2013-0759 CVE-2013-0744 CVE-2013-0764 CVE-2013-0745 CVE-2013-0746 CVE-2013-0747 CVE-2013-0748 CVE-2013-0750 CVE-2013-0752 CVE-2013-0757 CVE-2013-0758 CVE-2013-0753 CVE-2013-0754 CVE-2013-0755 CVE-2013-0756 CVE-2013-0743	Version:	7
Platform(s):	Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04	Product(s):	firefox
Definition Synopsis:
Release section Ubuntu 12.10 is installed AND firefox DPKG is earlier than 18.0.2+build1-0ubuntu0.12.10.1 AND Release section Ubuntu 12.04 is installed AND firefox DPKG is earlier than 18.0.2+build1-0ubuntu0.12.04.1 AND Release section Ubuntu 11.10 is installed AND firefox DPKG is earlier than 18.0.2+build1-0ubuntu0.11.10.1 AND Release section Ubuntu 10.04 is installed AND firefox DPKG is earlier than 18.0.2+build1-0ubuntu0.10.04.1

Definition Id: oval:org.mitre.oval:def:18476

Oval ID:	oval:org.mitre.oval:def:18476
Title:	DSA-2599-1 nss - mis-issued intermediates
Description:	Google, Inc. discovered that the TurkTrust certification authority included in the Network Security Service libraries (nss) mis-issued two intermediate CAs which could be used to generate rogue end-entity certificates. This update explicitly distrusts those two intermediate CAs. The two existing TurkTrust root CAs remain active.
Family:	unix	Class:	patch
Reference(s):	DSA-2599-1 CVE-2013-0743	Version:	7
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	nss
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND nss DPKG is earlier than 3.12.8-1+squeeze6

Definition Id: oval:org.mitre.oval:def:25815

Oval ID:	oval:org.mitre.oval:def:25815
Title:	SUSE-SU-2013:0306-1 -- Security update for Mozilla Firefox
Description:	Mozilla Firefox is updated to the 10.0.12ESR version. This is a roll-up update for LTSS. It fixes a lot of security issues and bugs.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0306-1 CVE-2013-0769 CVE-2013-0749 CVE-2013-0770 CVE-2013-0760 CVE-2013-0762 CVE-2013-0766 CVE-2013-0763 CVE-2013-0771 CVE-2012-5829 CVE-2013-0768 CVE-2013-0759 CVE-2013-0744 CVE-2013-0751 CVE-2013-0764 CVE-2013-0745 CVE-2013-0746 CVE-2013-0747 CVE-2013-0748 CVE-2013-0750 CVE-2013-0752 CVE-2013-0757 CVE-2013-0758 CVE-2013-0753 CVE-2013-0754 CVE-2013-0755 CVE-2013-0756 CVE-2013-0743	Version:	5
Platform(s):	SUSE Linux Enterprise Server 10	Product(s):	Mozilla Firefox
Definition Synopsis:
SUSE Linux Enterprise Server 10 is installed Packages match section firefox3-cairo RPM is earlier than 0:1.2.4-0.8.5 AND firefox3-gtk2 RPM is earlier than 0:2.10.6-0.12.21 AND firefox3-pango RPM is earlier than 0:1.14.5-0.12.178 AND mozilla-nspr RPM is earlier than 0:4.9.4-0.6.1 AND mozilla-nspr-devel RPM is earlier than 0:4.9.4-0.6.1 AND mozilla-nss RPM is earlier than 0:3.14.1-0.6.1 AND mozilla-nss-devel RPM is earlier than 0:3.14.1-0.6.1 AND mozilla-nss-tools RPM is earlier than 0:3.14.1-0.6.1 AND firefox3-cairo-32bit RPM is earlier than 0:1.2.4-0.8.5 AND firefox3-gtk2-32bit RPM is earlier than 0:2.10.6-0.12.21 AND firefox3-pango-32bit RPM is earlier than 0:1.14.5-0.12.178 AND mozilla-nspr-32bit RPM is earlier than 0:4.9.4-0.6.1 AND mozilla-nss-32bit RPM is earlier than 0:3.14.1-0.6.1 AND MozillaFirefox RPM is earlier than 0:10.0.12-0.6.3 AND MozillaFirefox-branding-SLED RPM is earlier than 0:7-0.8.46 AND MozillaFirefox-translations RPM is earlier than 0:10.0.12-0.6.3

Definition Id: oval:org.mitre.oval:def:26135

Oval ID:	oval:org.mitre.oval:def:26135
Title:	SUSE-SU-2013:0292-1 -- Security update for MozillaFirefox
Description:	Mozilla Firefox was updated to the 10.0.12ESR release for LTSS.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:0292-1 CVE-2013-0769 CVE-2013-0749 CVE-2013-0770 CVE-2013-0760 CVE-2013-0762 CVE-2013-0766 CVE-2013-0767 CVE-2013-0761 CVE-2013-0763 CVE-2013-0771 CVE-2012-5829 CVE-2013-0768 CVE-2013-0759 CVE-2013-0744 CVE-2013-0751 CVE-2013-0764 CVE-2013-0745 CVE-2013-0746 CVE-2013-0747 CVE-2013-0748 CVE-2013-0750 CVE-2013-0752 CVE-2013-0757 CVE-2013-0758 CVE-2013-0753 CVE-2013-0754 CVE-2013-0755 CVE-2013-0756 CVE-2013-0743	Version:	5
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	MozillaFirefox
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section MozillaFirefox RPM is earlier than 0:10.0.12-0.4.3 AND MozillaFirefox-branding-SLED RPM is earlier than 0:7-0.6.7.103 AND MozillaFirefox-translations RPM is earlier than 0:10.0.12-0.4.3 AND libfreebl3 RPM is earlier than 0:3.14.1-0.3.1 AND mozilla-nspr RPM is earlier than 0:4.9.4-0.3.1 AND mozilla-nss RPM is earlier than 0:3.14.1-0.3.1 AND mozilla-nss-tools RPM is earlier than 0:3.14.1-0.3.1 AND libfreebl3-32bit RPM is earlier than 0:3.14.1-0.3.1 AND mozilla-nspr-32bit RPM is earlier than 0:4.9.4-0.3.1 AND mozilla-nss-32bit RPM is earlier than 0:3.14.1-0.3.1

Nessus® Vulnerability Scanner

Date	Description
2015-05-20	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2013-0306-1.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-17.nasl - Type : ACT_GATHER_INFO
2013-04-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-050.nasl - Type : ACT_GATHER_INFO
2013-02-06	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1681-4.nasl - Type : ACT_GATHER_INFO
2013-02-04	Name : The remote Fedora host is missing a security update. File : fedora_2013-1432.nasl - Type : ACT_GATHER_INFO
2013-02-04	Name : The remote Fedora host is missing a security update. File : fedora_2013-1382.nasl - Type : ACT_GATHER_INFO
2013-01-28	Name : The remote Fedora host is missing a security update. File : fedora_2013-1442.nasl - Type : ACT_GATHER_INFO
2013-01-25	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_firefox-201301-130110.nasl - Type : ACT_GATHER_INFO
2013-01-23	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1681-3.nasl - Type : ACT_GATHER_INFO
2013-01-20	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_firefox-201301-8426.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Windows host contains a web browser that is affected by multiple v... File : seamonkey_215.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1687-2.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1687-1.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Mac OS X host contains a web browser that is affected by multiple ... File : macosx_firefox_10_0_12.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Mac OS X host contains a web browser that is affected by multiple ... File : macosx_firefox_18_0.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Windows host contains a mail client that is potentially affected b... File : mozilla_thunderbird_1702.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Windows host contains a mail client that is potentially affected b... File : mozilla_thunderbird_10012.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_180.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_1702.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_10012.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Mac OS X host contains a web browser that is affected by multiple ... File : macosx_firefox_17_0_2.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Mac OS X host contains a mail client that is potentially affected ... File : macosx_thunderbird_17_0_2.nasl - Type : ACT_GATHER_INFO
2013-01-15	Name : The remote Mac OS X host contains a mail client that is potentially affected ... File : macosx_thunderbird_10_0_12.nasl - Type : ACT_GATHER_INFO
2013-01-10	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-003.nasl - Type : ACT_GATHER_INFO
2013-01-09	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1681-1.nasl - Type : ACT_GATHER_INFO
2013-01-09	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1681-2.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2023-11-07 21:46:27	Multiple Updates
2020-05-23 00:35:53	Multiple Updates
2016-12-16 09:23:25	Multiple Updates
2016-04-26 22:45:15	Multiple Updates
2015-05-21 13:30:07	Multiple Updates
2014-06-14 13:34:29	Multiple Updates
2014-02-17 11:16:09	Multiple Updates
2013-05-10 22:28:34	Multiple Updates
2013-01-25 21:18:45	First insertion

Global Informations

Type	Count
Oval ID(s)	9
Nessus® Exploit(s)	26

	Related
10	USN-1681-4
10	USN-1681-3
10	USN-1681-2
10	USN-1681-1
10	MDVSA-2013:002
4.3	MDVSA-2013:050
0	USN-1687-2
0	USN-1687-1
0	MDVSA-2013:003
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 9 more Alert(s)

N/A - CVE-2013-0743

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU