Secunia

icon customer login

Community Login

icon customer login

icon customer login

Secunia CSI 5.0

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2007-0008
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-0008

Description: Integer underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, SeaMonkey before 1.0.8, Thunderbird before 1.5.0.10, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via a crafted SSLv2 server message containing a public key that is too short to encrypt the "Master Secret", which results in a heap-based overflow.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/32666 UBUNTU http://www.ubuntu.com/usn/usn-431-1 http://www.ubuntu.com/usn/usn-428-1 SUSE http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html http://www.novell.com/linux/security/advisories/2007_22_mozilla.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-102945-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102856-1 ST 1017696 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 SGI SAID Secunia Advisory: SA24650 Secunia Advisory: SA24703 Secunia Advisory: SA24562 Secunia Advisory: SA24522 Secunia Advisory: SA24410 Secunia Advisory: SA24389 Secunia Advisory: SA24384 Secunia Advisory: SA24395 Secunia Advisory: SA24293 Secunia Advisory: SA24320 Secunia Advisory: SA24343 Secunia Advisory: SA24333 Secunia Advisory: SA24328 Secunia Advisory: SA24205 Secunia Advisory: SA24290 Secunia Advisory: SA24287 Secunia Advisory: SA24277 Secunia Advisory: SA24253 Secunia Advisory: SA24252 Secunia Advisory: SA24238 Secunia Advisory: SA25597 Secunia Advisory: SA24406 Secunia Advisory: SA24455 Secunia Advisory: SA24456 Secunia Advisory: SA24457 Secunia Advisory: SA24342 Secunia Advisory: SA25588 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0108.html http://www.redhat.com/support/errata/RHSA-2007-0097.html http://www.redhat.com/support/errata/RHSA-2007-0078.html http://rhn.redhat.com/errata/RHSA-2007-0077.html http://www.redhat.com/support/errata/RHSA-2007-0079.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10502 OSVDB 32105 MISC MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:052 http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=482 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200703-22.xml http://security.gentoo.org/glsa/glsa-200703-18.xml FEDORA http://fedoranews.org/cms/node/2749 http://fedoranews.org/cms/node/2747 http://fedoranews.org/cms/node/2713 http://fedoranews.org/cms/node/2728 http://fedoranews.org/cms/node/2709 http://fedoranews.org/cms/node/2711 DEBIAN http://www.debian.org/security/2007/dsa-1336 CONFIRM http://www.mozilla.org/security/announce/2007/mfsa2007-06.html CERT-VN 377812 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/461809/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/461336/100/0/threaded BID 22694

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports & Papers
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2012 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability