NVD

Id
30120  
Name
CVE-2014-1491  
Description
Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-02-06  
Modified Date
2016-12-30  
Seq
2014-1491  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
158674 30120 CVE-2014-1491 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761  View
158675 30120 CVE-2014-1491 FEDORA-2014-2041  View
158676 30120 CVE-2014-1491 FEDORA-2014-2083  View
158677 30120 CVE-2014-1491 openSUSE-SU-2014:0212  View
158678 30120 CVE-2014-1491 openSUSE-SU-2014:0213  View
158679 30120 CVE-2014-1491 SUSE-SU-2014:0248  View
158680 30120 CVE-2014-1491 openSUSE-SU-2014:0419  View
158681 30120 CVE-2014-1491 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
158682 30120 CVE-2014-1491 DSA-2858  View
158683 30120 CVE-2014-1491 DSA-2994  View
158684 30120 CVE-2014-1491 http://www.mozilla.org/security/announce/2014/mfsa2014-12.html  View
158685 30120 CVE-2014-1491 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
158686 30120 CVE-2014-1491 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
158687 30120 CVE-2014-1491 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
158688 30120 CVE-2014-1491 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
158689 30120 CVE-2014-1491 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
158690 30120 CVE-2014-1491 65332  View
158691 30120 CVE-2014-1491 USN-2102-1  View
158692 30120 CVE-2014-1491 USN-2102-2  View
158693 30120 CVE-2014-1491 USN-2119-1  View
158694 30120 CVE-2014-1491 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View
158695 30120 CVE-2014-1491 https://bugzilla.mozilla.org/show_bug.cgi?id=934545  View
158696 30120 CVE-2014-1491 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12457 JVNDB-2014-001332 Mozilla 製品などで使用される Mozilla Network Security Services における暗号保護メカニズムを回避される脆弱性 Mozilla Firefox、Thunderbird、SeaMonkey およびその他の製品で使用される Mozilla Network Security Services (NSS) は、Diffie-Hellman 鍵交換の公開値を適切に制限しないため、チケット処理において暗号保護メカニズムを回避される脆弱性が存在します。 CVE-2014-1491 68778 CVE-2014-1491 30120 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001332.html 2014-02-04 2016-01-29 View