NVD

Id
28103  
Name
CVE-2015-7575  
Description
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-01-08  
Modified Date
2016-12-07  
Seq
2015-7575  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147695 28103 CVE-2015-7575 SUSE-SU-2016:0256  View
147696 28103 CVE-2015-7575 openSUSE-SU-2016:0263  View
147697 28103 CVE-2015-7575 SUSE-SU-2016:0265  View
147698 28103 CVE-2015-7575 openSUSE-SU-2016:0268  View
147699 28103 CVE-2015-7575 SUSE-SU-2016:0269  View
147700 28103 CVE-2015-7575 openSUSE-SU-2016:0270  View
147701 28103 CVE-2015-7575 openSUSE-SU-2016:0272  View
147702 28103 CVE-2015-7575 openSUSE-SU-2016:0279  View
147703 28103 CVE-2015-7575 openSUSE-SU-2015:2405  View
147704 28103 CVE-2015-7575 openSUSE-SU-2016:0007  View
147705 28103 CVE-2015-7575 openSUSE-SU-2016:0161  View
147706 28103 CVE-2015-7575 openSUSE-SU-2016:0162  View
147707 28103 CVE-2015-7575 openSUSE-SU-2016:0307  View
147708 28103 CVE-2015-7575 openSUSE-SU-2016:0308  View
147709 28103 CVE-2015-7575 openSUSE-SU-2016:0488  View
147710 28103 CVE-2015-7575 openSUSE-SU-2016:0605  View
147711 28103 CVE-2015-7575 RHSA-2016:0049  View
147712 28103 CVE-2015-7575 RHSA-2016:0050  View
147713 28103 CVE-2015-7575 RHSA-2016:0053  View
147714 28103 CVE-2015-7575 RHSA-2016:0054  View
147715 28103 CVE-2015-7575 RHSA-2016:0055  View
147716 28103 CVE-2015-7575 RHSA-2016:0056  View
147717 28103 CVE-2015-7575 DSA-3436  View
147718 28103 CVE-2015-7575 DSA-3437  View
147719 28103 CVE-2015-7575 DSA-3457  View
147720 28103 CVE-2015-7575 DSA-3458  View
147721 28103 CVE-2015-7575 DSA-3465  View
147722 28103 CVE-2015-7575 DSA-3491  View
147723 28103 CVE-2015-7575 http://www.mozilla.org/security/announce/2015/mfsa2015-150.html  View
147724 28103 CVE-2015-7575 http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html  View
147725 28103 CVE-2015-7575 http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
147726 28103 CVE-2015-7575 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
147727 28103 CVE-2015-7575 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
147728 28103 CVE-2015-7575 79684  View
147729 28103 CVE-2015-7575 91787  View
147730 28103 CVE-2015-7575 1034541  View
147731 28103 CVE-2015-7575 USN-2863-1  View
147732 28103 CVE-2015-7575 USN-2864-1  View
147733 28103 CVE-2015-7575 USN-2865-1  View
147734 28103 CVE-2015-7575 USN-2866-1  View
147735 28103 CVE-2015-7575 USN-2884-1  View
147736 28103 CVE-2015-7575 USN-2904-1  View
147737 28103 CVE-2015-7575 RHSA-2016:1430  View
147738 28103 CVE-2015-7575 https://bugzilla.mozilla.org/show_bug.cgi?id=1158489  View
147739 28103 CVE-2015-7575 https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.20.2_release_notes  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11460 JVNDB-2015-006780 Mozilla Firefox で使用される Mozilla Network Security Services におけるサーバになりすまされる脆弱性 Mozilla Firefox で使用される Mozilla Network Security Services (NSS) は、TLS 1.2 ハンドシェイクプロトコルトラフィックの Server Key Exchange メッセージの MD5 署名を拒否しないため、サーバになりすまされる脆弱性が存在します。 CVE-2015-7575 84800 CVE-2015-7575 28103 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006780.html 2015-12-22 2016-11-22 View