| Package | Affected versions | Patched versions |
|---|---|---|
| network security services | < 3.14.3 | 3.14.3 |
| enterprise manager ops center | = 11.1= 12.1= 12.2 | |
| glassfish communications server | = 2.0 | |
| glassfish server | = 2.1.1 | |
| iplanet web proxy server | = 4.0 | |
| iplanet web server | = 6.1= 7.0 | |
| opensso | = 3.0-03 | |
| traffic director | = 11.1.1.6.0= 11.1.1.7.0 | |
| vm server | = 3.2 |
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free