Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of service (via application crash) or execute arbitrary code as the user invoking the program. (CVE-2009-2404)

Moxie Marlinspike and Dan Kaminsky independently discovered that NSS did not properly handle certificates with NULL characters in the certificate name. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. (CVE-2009-2408)

Dan Kaminsky discovered NSS would still accept certificates with MD2 hash signatures. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site.
(CVE-2009-2409).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security issues in nss prior to 3.12.3 could lead to a man-in-the-middle attack via a spoofed X.509 certificate (CVE-2009-2408) and md2 algorithm flaws (CVE-2009-2409), and also cause a denial-of-service and possible code execution via a long domain name in X.509 certificate (CVE-2009-2404).

This update provides the latest versions of NSS and NSPR libraries which are not vulnerable to those attacks.

Update :

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers

The Mozilla NSS security framework was updated to version 3.12.3.1.

CVE-2009-2404 / MFSA 2009-43 : Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.

MFSA 2009-42 / CVE-2009-2408: IOActive security researcher Dan Kaminsky reported a mismatch in the treatment of domain names in SSL certificates between SSL clients and the Certificate Authorities (CA) which issue server certificates. In particular, if a malicious person requested a certificate for a host name with an invalid null character in it most CAs would issue the certificate if the requester owned the domain specified after the null, while most SSL clients (browsers) ignored that part of the name and used the unvalidated part in front of the null. This made it possible for attackers to obtain certificates that would function for any site they wished to target.
These certificates could be used to intercept and potentially alter encrypted communication between the client and a server such as sensitive bank account transactions. This vulnerability was independently reported to us by researcher Moxie Marlinspike who also noted that since Firefox relies on SSL to protect the integrity of security updates this attack could be used to serve malicious updates.

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. (CVE-2009-3072, CVE-2009-3075)

A use-after-free flaw was found in SeaMonkey. An attacker could use this flaw to crash SeaMonkey or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. (CVE-2009-3077)

Descriptions in the dialogs when adding and removing PKCS #11 modules were not informative. An attacker able to trick a user into installing a malicious PKCS #11 module could use this flaw to install their own Certificate Authority certificates on a user's machine, making it possible to trick the user into believing they are viewing a trusted site or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. (CVE-2009-3076)

A flaw was found in the way SeaMonkey displays the address bar when window.open() is called in a certain way. An attacker could use this flaw to conceal a malicious URL, possibly tricking a user into believing they are viewing a trusted site. (CVE-2009-2654)

All SeaMonkey users should upgrade to these updated packages, which correct these issues. After installing the update, SeaMonkey must be restarted for the changes to take effect.

This update of mutt improves the handling of the \0 character in SSL certificates. (CVE-2009-2408 )

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name.
(CVE-2009-2408)

This update of mutt improves the handling of the \0 character in SSL certificates. (CVE-2009-2408)

neon did not properly handle embedded NUL characters in X.509 certificates when comparing host names. Attackers could exploit that to spoof SSL servers (CVE-2009-2408).

Specially crafted XML documents that contain a large number of nested entity references could cause neon to consume large amounts of CPU and memory (CVE-2009-2473).

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-2408     Dan Kaminsky and Moxie Marlinspike discovered that     icedove does not properly handle a '\0' character in a     domain name in the subject's Common Name (CN) field of     an X.509 certificate (MFSA 2009-42).

  - CVE-2009-2404     Moxie Marlinspike reported a heap overflow vulnerability     in the code that handles regular expressions in     certificate names (MFSA 2009-43).

  - CVE-2009-2463     monarch2020 discovered an integer overflow in a base64     decoding function (MFSA 2010-07).

  - CVE-2009-3072     Josh Soref discovered a crash in the BinHex decoder     (MFSA 2010-07).

  - CVE-2009-3075     Carsten Book reported a crash in the JavaScript engine     (MFSA 2010-07).

  - CVE-2010-0163     Ludovic Hirlimann reported a crash indexing some     messages with attachments, which could lead to the     execution of arbitrary code (MFSA 2010-07).

Updated nspr and nss packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 4.7 Extended Update Support.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time, basic memory management (malloc and free), and shared library linking.

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSLv2, SSLv3, TLS, and other security standards.

These updated packages upgrade NSS from the previous version, 3.12.2, to a prerelease of version 3.12.4. The version of NSPR has also been upgraded from 4.7.3 to 4.7.4.

Moxie Marlinspike reported a heap overflow flaw in a regular expression parser in the NSS library used by browsers such as Mozilla Firefox to match common names in certificates. A malicious website could present a carefully-crafted certificate in such a way as to trigger the heap overflow, leading to a crash or, possibly, arbitrary code execution with the permissions of the user running the browser.
(CVE-2009-2404)

Note: in order to exploit this issue without further user interaction in Firefox, the carefully-crafted certificate would need to be signed by a Certificate Authority trusted by Firefox, otherwise Firefox presents the victim with a warning that the certificate is untrusted.
Only if the user then accepts the certificate will the overflow take place.

Dan Kaminsky discovered flaws in the way browsers such as Firefox handle NULL characters in a certificate. If an attacker is able to get a carefully-crafted certificate signed by a Certificate Authority trusted by Firefox, the attacker could use the certificate during a man-in-the-middle attack and potentially confuse Firefox into accepting it by mistake. (CVE-2009-2408)

Dan Kaminsky found that browsers still accept certificates with MD2 hash signatures, even though MD2 is no longer considered a cryptographically strong algorithm. This could make it easier for an attacker to create a malicious certificate that would be treated as trusted by a browser. NSS now disables the use of MD2 and MD4 algorithms inside signatures by default. (CVE-2009-2409)

These version upgrades also provide fixes for the following bugs :

* SSL client authentication failed against an Apache server when it was using the mod_nss module and configured for NSSOCSP. On the client side, the user agent received an error message that referenced 'Error Code: -12271' and stated that establishing an encrypted connection had failed because the certificate had been rejected by the host.

On the server side, the nss_error_log under /var/log/httpd/ contained the following message :

[error] Re-negotiation handshake failed: Not accepted by client!?

Also, /var/log/httpd/error_log contained this error :

SSL Library Error: -8071 The OCSP server experienced an internal error

With these updated packages, the dependency problem which caused this failure has been resolved so that SSL client authentication with an Apache web server using mod_nss which is configured for NSSOCSP succeeds as expected. Note that if the presented client certificate is expired, then access is denied, the user agent is presented with an error message about the invalid certificate, and the OCSP queries are seen in the OCSP responder. Also, similar OCSP status verification happens for SSL server certificates used in Apache upon instance start or restart. (BZ#508026)

* NSS uses a software integrity test to detect code corruption. RPM transactions and system link optimization daemons (such as prelink) can change the contents of libraries, causing the software integrity test to fail. In combination with the updated prelink package (RHBA-2009:1041), these updated packages can now prevent software integrity test failures. (BZ#495938)

All users of nspr and nss are advised to upgrade to these updated packages, which resolve these issues.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1184 advisory.

    nspr:

    [4.7.4-1.el5_3.1]
    - create z-stream version

    [4.7.4-1]
    - Update to NSPR 4.7.4

    nss:

    [3.12.3.99.3-1.el5_3.2]
    - adjust ssl cipher count constant (bug 505650)

    [3.12.3.99.3-1.el5_3.1]
    - create z-stream version

    [3.12.3.99.3-1]
    - updated to NSS_3_12_4_FIPS1_WITH_CKBI_1_75

    [3.12.3-5]
    - updated patch to seckey

    [3.12.3-4]
    - add a patch to seckey

    [3.12.3-3]
    - remove references to SEED

    [3.12.3-2]
    - update to NSS 3.12.3

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
40490	Ubuntu 8.04 LTS / 8.10 / 9.04 : nss vulnerabilities (USN-810-1)	Nessus	Ubuntu Local Security Checks	2009/8/5	2021/1/19	high
40522	Mandriva Linux Security Advisory : nss (MDVSA-2009:197-3)	Nessus	Mandriva Local Security Checks	2009/8/10	2021/1/6	high
40652	openSUSE Security Update : libfreebl3 (libfreebl3-1201)	Nessus	SuSE Local Security Checks	2009/8/20	2021/1/14	high
40933	CentOS 4 : seamonkey (CESA-2009:1431)	Nessus	CentOS Local Security Checks	2009/9/11	2021/1/4	critical
41036	openSUSE Security Update : mutt (mutt-1298)	Nessus	SuSE Local Security Checks	2009/9/22	2021/1/14	medium
41041	openSUSE Security Update : libldap-2_4-2 (libldap-2_4-2-1301)	Nessus	SuSE Local Security Checks	2009/9/22	2021/1/14	medium
41559	SuSE 10 Security Update : mutt (ZYPP Patch Number 6484)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	medium
42014	openSUSE 10 Security Update : libldap-2_4-2 (libldap-2_4-2-6488)	Nessus	SuSE Local Security Checks	2009/10/6	2021/1/14	medium
42315	openSUSE Security Update : libneon-devel (libneon-devel-1377)	Nessus	SuSE Local Security Checks	2009/10/30	2021/1/14	medium
45397	Debian DSA-2025-1 : icedove - several vulnerabilities	Nessus	Debian Local Security Checks	2010/4/1	2021/1/4	critical
63888	RHEL 4 : nspr and nss (RHSA-2009:1190)	Nessus	Red Hat Local Security Checks	2013/1/24	2021/1/14	high
67902	Oracle Linux 5 : nspr / and / nss (ELSA-2009-1184)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	medium

检测

插件搜索

high

high

high

critical

medium

medium

medium

medium

medium

critical

high

medium