4.3 - USN-1763-1

Executive Summary

Summary
Title	NSS vulnerability

Informations
Name	USN-1763-1	First vendor Publication	2013-03-14
Vendor	Ubuntu	Last vendor Modification	2013-03-14
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:N/A:N)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.10 - Ubuntu 12.04 LTS - Ubuntu 11.10 - Ubuntu 10.04 LTS

Summary:

NSS could be made to expose sensitive information over the network.

Software Description: - nss: Network Security Service library

Details:

Nadhem Alfardan and Kenny Paterson discovered that the TLS protocol as used in NSS was vulnerable to a timing side-channel attack known as the "Lucky Thirteen" issue. A remote attacker could use this issue to perform plaintext-recovery attacks via analysis of timing data.

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.10:
libnss3 3.14.3-0ubuntu0.12.10.1

Ubuntu 12.04 LTS:
libnss3 3.14.3-0ubuntu0.12.04.1

Ubuntu 11.10:
libnss3 3.14.3-0ubuntu0.11.10.1

Ubuntu 10.04 LTS:
libnss3-1d 3.14.3-0ubuntu0.10.04.1

After a standard system update you need to restart any applications that use NSS, such as Evolution and Chromium, to make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1763-1
CVE-2013-1620

Package Information:
https://launchpad.net/ubuntu/+source/nss/3.14.3-0ubuntu0.12.10.1
https://launchpad.net/ubuntu/+source/nss/3.14.3-0ubuntu0.12.04.1
https://launchpad.net/ubuntu/+source/nss/3.14.3-0ubuntu0.11.10.1
https://launchpad.net/ubuntu/+source/nss/3.14.3-0ubuntu0.10.04.1

Original Source

Url : http://www.ubuntu.com/usn/USN-1763-1

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-203	Information Exposure Through Discrepancy

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:18127

Oval ID:	oval:org.mitre.oval:def:18127
Title:	USN-1763-1 -- nss vulnerability
Description:	NSS could be made to expose sensitive information over the network.
Family:	unix	Class:	patch
Reference(s):	USN-1763-1 CVE-2013-1620	Version:	7
Platform(s):	Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04	Product(s):	nss
Definition Synopsis:
Release section Ubuntu 12.10 is installed AND libnss3 DPKG is earlier than 3.14.3-0ubuntu0.12.10.1 AND Release section Ubuntu 12.04 is installed AND libnss3 DPKG is earlier than 3.14.3-0ubuntu0.12.04.1 AND Release section Ubuntu 11.10 is installed AND libnss3 DPKG is earlier than 3.14.3-0ubuntu0.11.10.1 AND Release section Ubuntu 10.04 is installed AND libnss3-1d DPKG is earlier than 3.14.3-0ubuntu0.10.04.1

Definition Id: oval:org.mitre.oval:def:21084

Oval ID:	oval:org.mitre.oval:def:21084
Title:	RHSA-2013:1135: nss and nspr security, bug fix, and enhancement update (Moderate)
Description:	The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1135-00 CESA-2013:1135 CVE-2013-0791 CVE-2013-1620	Version:	31
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	nspr nss
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x Packages section nspr is earlier than 0:4.9.5-1.el5_9 AND nspr-devel is earlier than 0:4.9.5-1.el5_9 AND nss-pkcs11-devel is earlier than 0:3.14.3-6.el5_9 AND nss-tools is earlier than 0:3.14.3-6.el5_9 AND nss-devel is earlier than 0:3.14.3-6.el5_9 AND nss is earlier than 0:3.14.3-6.el5_9

Definition Id: oval:org.mitre.oval:def:21177

Oval ID:	oval:org.mitre.oval:def:21177
Title:	RHSA-2013:1144: nss, nss-util, nss-softokn, and nspr security update (Moderate)
Description:	The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1144-00 CESA-2013:1144 CVE-2013-0791 CVE-2013-1620	Version:	31
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	nspr nss nss-softokn nss-util
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section nspr is earlier than 0:4.9.5-2.el6_4 AND nspr-devel is earlier than 0:4.9.5-2.el6_4 AND nss-softokn-freebl is earlier than 0:3.14.3-3.el6_4 AND nss-softokn-freebl-devel is earlier than 0:3.14.3-3.el6_4 AND nss-softokn-devel is earlier than 0:3.14.3-3.el6_4 AND nss-softokn is earlier than 0:3.14.3-3.el6_4 AND nss-pkcs11-devel is earlier than 0:3.14.3-4.el6_4 AND nss-tools is earlier than 0:3.14.3-4.el6_4 AND nss-devel is earlier than 0:3.14.3-4.el6_4 AND nss is earlier than 0:3.14.3-4.el6_4 AND nss-sysinit is earlier than 0:3.14.3-4.el6_4 AND nss-util-devel is earlier than 0:3.14.3-3.el6_4 AND nss-util is earlier than 0:3.14.3-3.el6_4

Definition Id: oval:org.mitre.oval:def:22788

Oval ID:	oval:org.mitre.oval:def:22788
Title:	ELSA-2013:1135: nss and nspr security, bug fix, and enhancement update (Moderate)
Description:	The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1135-00 CVE-2013-0791 CVE-2013-1620	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	nspr nss
Definition Synopsis:
Oracle Linux 5.x rpm test nspr is earlier than 0:4.9.5-1.el5_9 AND nspr-devel is earlier than 0:4.9.5-1.el5_9 AND nss-pkcs11-devel is earlier than 0:3.14.3-6.el5_9 AND nss-tools is earlier than 0:3.14.3-6.el5_9 AND nss-devel is earlier than 0:3.14.3-6.el5_9 AND nss is earlier than 0:3.14.3-6.el5_9

Definition Id: oval:org.mitre.oval:def:24119

Oval ID:	oval:org.mitre.oval:def:24119
Title:	ELSA-2013:1144: nss, nss-util, nss-softokn, and nspr security update (Moderate)
Description:	The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1144-00 CVE-2013-0791 CVE-2013-1620	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	nspr nss nss-softokn nss-util
Definition Synopsis:
Oracle Linux 6.x rpm test nspr is earlier than 0:4.9.5-2.el6_4 AND nspr-devel is earlier than 0:4.9.5-2.el6_4 AND nss-softokn-freebl is earlier than 0:3.14.3-3.el6_4 AND nss-softokn-freebl-devel is earlier than 0:3.14.3-3.el6_4 AND nss-softokn-devel is earlier than 0:3.14.3-3.el6_4 AND nss-softokn is earlier than 0:3.14.3-3.el6_4 AND nss-pkcs11-devel is earlier than 0:3.14.3-4.el6_4 AND nss-tools is earlier than 0:3.14.3-4.el6_4 AND nss-devel is earlier than 0:3.14.3-4.el6_4 AND nss is earlier than 0:3.14.3-4.el6_4 AND nss-sysinit is earlier than 0:3.14.3-4.el6_4 AND nss-util-devel is earlier than 0:3.14.3-3.el6_4 AND nss-util is earlier than 0:3.14.3-3.el6_4

Definition Id: oval:org.mitre.oval:def:27269

Oval ID:	oval:org.mitre.oval:def:27269
Title:	DEPRECATED: ELSA-2013-1144 -- nss, nss-util, nss-softokn, and nspr security update (moderate)
Description:	It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-1620) An out-of-bounds memory read flaw was found in the way NSS decoded certain certificates. If an application using NSS decoded a malformed certificate, it could cause the application to crash. (CVE-2013-0791)
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-1144 CVE-2013-0791 CVE-2013-1620	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	nspr nss nss-softokn nss-util
Definition Synopsis:
Oracle Linux 6.x Packages match section nspr is earlier than 0:4.9.5-2.el6_4 AND nss is earlier than 0:3.14.3-4.0.1.el6_4 AND nss-softokn is earlier than 0:3.14.3-3.el6_4 AND nss-util is earlier than 0:3.14.3-3.el6_4 AND nspr-devel is earlier than 0:4.9.5-2.el6_4 AND nss-devel is earlier than 0:3.14.3-4.0.1.el6_4 AND nss-pkcs11-devel is earlier than 0:3.14.3-4.0.1.el6_4 AND nss-softokn-devel is earlier than 0:3.14.3-3.el6_4 AND nss-softokn-freebl is earlier than 0:3.14.3-3.el6_4 AND nss-softokn-freebl-devel is earlier than 0:3.14.3-3.el6_4 AND nss-sysinit is earlier than 0:3.14.3-4.0.1.el6_4 AND nss-tools is earlier than 0:3.14.3-4.0.1.el6_4 AND nss-util-devel is earlier than 0:3.14.3-3.el6_4

Definition Id: oval:org.mitre.oval:def:27513

Oval ID:	oval:org.mitre.oval:def:27513
Title:	DEPRECATED: ELSA-2013-1135 -- nss and nspr security, bug fix, and enhancement update (moderate)
Description:	nspr [4.9.2-4] - Resolves: rhbz#924741 - Rebase to nspr-4.9.5 nss [3.14.3-6] - Resolves: rhbz#986969 - nssutil_ReadSecmodDB() leaks memory [3.14.3-5] - Define -DNO_FORK_CHECK when compiling softoken for ABI compatibility - Remove the unused and obsolete nss-nochktest.patch - Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue [3.14.3-4] - Fix rpmdiff test reported failures and remove other unwanted changes - Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue [3.14.3-3] - Update to NSS_3_14_3_RTM - Rework the rebase to preserve needed idiosynchracies - Ensure we install frebl/softoken from the extra build tree - Don't include freebl static library or its private headers - Add patch to deal with system sqlite not being recent enough - Don't install nss-sysinit nor sharedb - Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue [3.14.3-2] - Restore the freebl-softoken source tar ball updated to 3.14.3 - Renumbering of some sources for clarity - Resolves: rhbz#918870 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue [3.14.3-1] - Update to NSS_3_14_3_RTM - Resolves: rhbz#918870 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-1135 CVE-2013-0791 CVE-2013-1620	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	nspr nss
Definition Synopsis:
Oracle Linux 5.x Packages match section nspr is earlier than 0:4.9.5-1.el5_9 AND nss is earlier than 0:3.14.3-6.el5_9 AND nspr-devel is earlier than 0:4.9.5-1.el5_9 AND nss-devel is earlier than 0:3.14.3-6.el5_9 AND nss-pkcs11-devel is earlier than 0:3.14.3-6.el5_9 AND nss-tools is earlier than 0:3.14.3-6.el5_9

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mozilla Network Security Services cpe:2.3:a:mozilla:network_security_services:3.9.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.4:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.9.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.9:::::::* cpe:2.3:a:mozilla:network_security_services:3.8:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.7:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.7.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.7:::::::* cpe:2.3:a:mozilla:network_security_services:3.6.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.6:::::::* cpe:2.3:a:mozilla:network_security_services:3.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.4.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.4.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.4.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.4:::::::* cpe:2.3:a:mozilla:network_security_services:3.3.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.3.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.2.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.14.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.14.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.14:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.9:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.8:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.7:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.6:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.4:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.3.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.3.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.11:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.10:::::::* cpe:2.3:a:mozilla:network_security_services:3.12.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.12:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.9:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.8:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.7:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.6:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.5:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.4:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.3:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.10:::::::* cpe:2.3:a:mozilla:network_security_services:3.11.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.11:::::::* cpe:2.3:a:mozilla:network_security_services:3.10.2:::::::* cpe:2.3:a:mozilla:network_security_services:3.10.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.10:::::::* cpe:2.3:a:mozilla:network_security_services:3.1.1:::::::* cpe:2.3:a:mozilla:network_security_services:3.1:::::::* cpe:2.3:a:mozilla:network_security_services:::::::: cpe:2.3:a:mozilla:network_security_services:-:::::::*	60
Application	Oracle Enterprise Manager Ops Center cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2:::::::* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.1:::::::* cpe:2.3:a:oracle:enterprise_manager_ops_center:11.1:::::::*	3
Application	Oracle Glassfish Communications Server cpe:2.3:a:oracle:glassfish_communications_server:2.0:::::::*	1
Application	Oracle Glassfish Server cpe:2.3:a:oracle:glassfish_server:2.1.1:::::::*	1
Application	Oracle Iplanet Web Proxy Server cpe:2.3:a:oracle:iplanet_web_proxy_server:4.0:::::::*	1
Application	Oracle Iplanet Web Server cpe:2.3:a:oracle:iplanet_web_server:7.0:::::::* cpe:2.3:a:oracle:iplanet_web_server:6.1:::::::*	2
Application	Oracle Opensso cpe:2.3:a:oracle:opensso:3.0-03:::::::*	1
Application	Oracle Traffic Director cpe:2.3:a:oracle:traffic_director:11.1.1.7.0:::::::* cpe:2.3:a:oracle:traffic_director:11.1.1.6.0:::::::*	2
Application	Oracle Vm Server cpe:2.3:a:oracle:vm_server:3.2::::::x86:	1
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:12.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:11.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::	4
Os	Redhat Enterprise Linux Desktop cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::*	2
Os	Redhat Enterprise Linux Eus cpe:2.3:o:redhat:enterprise_linux_eus:5.9:::::::*	1
Os	Redhat Enterprise Linux Server cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::*	2
Os	Redhat Enterprise Linux Server Aus cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9:::::::*	1
Os	Redhat Enterprise Linux Workstation cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::*	2

Information Assurance Vulnerability Management (IAVM)

Date	Description
2014-04-17	IAVM : 2014-A-0055 - Multiple Vulnerabilities in Oracle Fusion Middleware Severity : Category I - VMSKEY : V0049585
2014-01-16	IAVM : 2014-A-0009 - Multiple Vulnerabilities in Oracle Fusion Middleware Severity : Category I - VMSKEY : V0043395

Nessus® Vulnerability Scanner

Date	Description
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_esx_VMSA-2013-0015_remote.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_nss_20140809.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2013-1181.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15630.nasl - Type : ACT_GATHER_INFO
2014-06-23	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-19.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-309.nasl - Type : ACT_GATHER_INFO
2013-12-23	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-266.nasl - Type : ACT_GATHER_INFO
2013-12-23	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-265.nasl - Type : ACT_GATHER_INFO
2013-12-14	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20131212_nss__nspr__and_nss_util_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-12-13	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-1829.nasl - Type : ACT_GATHER_INFO
2013-12-13	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-1829.nasl - Type : ACT_GATHER_INFO
2013-12-13	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1829.nasl - Type : ACT_GATHER_INFO
2013-12-10	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20131205_nss_and_nspr_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-12-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-1791.nasl - Type : ACT_GATHER_INFO
2013-12-06	Name : The remote VMware ESX host is missing one or more security-related patches. File : vmware_VMSA-2013-0015.nasl - Type : ACT_GATHER_INFO
2013-12-06	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-1791.nasl - Type : ACT_GATHER_INFO
2013-12-06	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1791.nasl - Type : ACT_GATHER_INFO
2013-10-01	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-217.nasl - Type : ACT_GATHER_INFO
2013-10-01	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-216.nasl - Type : ACT_GATHER_INFO
2013-08-09	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130807_nss__nss_util__nss_softokn__and_nspr_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-08-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1144.nasl - Type : ACT_GATHER_INFO
2013-08-08	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-1144.nasl - Type : ACT_GATHER_INFO
2013-08-08	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-1144.nasl - Type : ACT_GATHER_INFO
2013-08-06	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130805_nss_and_nspr_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-08-06	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1135.nasl - Type : ACT_GATHER_INFO
2013-08-06	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-1135.nasl - Type : ACT_GATHER_INFO
2013-08-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-1135.nasl - Type : ACT_GATHER_INFO
2013-04-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-050.nasl - Type : ACT_GATHER_INFO
2013-03-15	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1763-1.nasl - Type : ACT_GATHER_INFO
2013-03-15	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1763-2.nasl - Type : ACT_GATHER_INFO
2013-03-14	Name : The remote Fedora host is missing one or more security updates. File : fedora_2013-3079.nasl - Type : ACT_GATHER_INFO
2013-03-01	Name : The remote Fedora host is missing one or more security updates. File : fedora_2013-2929.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 12:01:41	Multiple Updates
2013-03-27 13:19:11	Multiple Updates
2013-03-14 21:19:33	Multiple Updates
2013-03-14 21:17:36	First insertion

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	7
CPE ID(s)	84
IAVM(s)	2
Nessus® Exploit(s)	32

	Related
4.3	CVE-2013-1620
0	USN-1763-2
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 2 more Alert(s)

4.3 - USN-1763-1

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Information Assurance Vulnerability Management (IAVM)

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU