| Package | Affected versions | Patched versions |
|---|---|---|
| network security services | = 3.2= 3.2.1= 3.3= 3.3.1= 3.3.2= 3.4= 3.4.1= 3.4.2= 3.5= 3.6= 3.6.1= 3.7= 3.7.1= 3.7.2= 3.7.3= 3.7.5= 3.7.7= 3.8= 3.9 | |
| certificate server | = 1.0= 4.2 | |
| directory server | = 1.3= 3.1= 3.12= 4.1= 4.11= 4.13 | |
| enterprise server | = 2.0= 2.0.1c= 2.0a= 3.0= 3.0.1= 3.0.1b= 3.0.7a= 3.0l= 3.1= 3.2= 3.3= 3.4= 3.5= 3.5.1= 3.6= 4.0= 4.1= 4.1.1= 5.0 | |
| java enterprise system | = 2003q4= 2004q2 | |
| java system application server | = 7.0= 7.1 | |
| one application server | = 6.0 | |
| one web server | = 4.1= 6.0= 6.1 |
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free