ISS X-Force has reported a vulnerability in the NSS library included with various Netscape products, which can be exploited by malicious people to compromise a vulnerable system.

For more information:
SA12362

The following products reportedly include the affected library:
* Netscape Enterprise Server
* Netscape Personalization Engine
* Netscape Directory Server
* Netscape Certificate Management System

Solution
Install the original NSS library, disable SSLv2 support, or filter access to affected SSL-based services.

Provided and/or discovered by
Mark Dowd, ISS X-Force.

Changelog
Further details available to Secunia VIM customers

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers