NVD

Id
37902  
Name
CVE-2013-1740  
Description
The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-01-18  
Modified Date
2016-11-28  
Seq
2013-1740  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193395 37902 CVE-2013-1740 openSUSE-SU-2014:0212  View
193396 37902 CVE-2013-1740 openSUSE-SU-2014:0213  View
193397 37902 CVE-2013-1740 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
193398 37902 CVE-2013-1740 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
193399 37902 CVE-2013-1740 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
193400 37902 CVE-2013-1740 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
193401 37902 CVE-2013-1740 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
193402 37902 CVE-2013-1740 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
193403 37902 CVE-2013-1740 64944  View
193404 37902 CVE-2013-1740 USN-2088-1  View
193405 37902 CVE-2013-1740 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View
193406 37902 CVE-2013-1740 mozilla-nss-cve20131740-info-disc(90394)  View
193407 37902 CVE-2013-1740 https://bugs.gentoo.org/show_bug.cgi?id=498172  View
193408 37902 CVE-2013-1740 https://bugzilla.mozilla.org/show_bug.cgi?id=919877  View
193409 37902 CVE-2013-1740 https://bugzilla.redhat.com/show_bug.cgi?id=1053725  View
193410 37902 CVE-2013-1740 https://developer.mozilla.org/docs/NSS/NSS_3.15.4_release_notes  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24281 JVNDB-2013-005856 Mozilla Network Security Services の libssl における SSL サーバになりすまされる脆弱性 Mozilla Network Security Services (NSS) の libssl の sslsecur.c 内の ssl_Do1stHandshake 関数には、TLS False Start 機能が有効な場合、SSL サーバになりすまされる脆弱性が存在します。 CVE-2013-1740 61682 CVE-2013-1740 37902 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005856.html 2013-09-23 2016-01-29 View