NVD

Id
40880  
Name
CVE-2013-5606  
Description
The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions via a crafted certificate.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-11-18  
Modified Date
2016-12-30  
Seq
2013-5606  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206605 40880 CVE-2013-5606 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761  View
206606 40880 CVE-2013-5606 SUSE-SU-2013:1807  View
206607 40880 CVE-2013-5606 openSUSE-SU-2013:1732  View
206608 40880 CVE-2013-5606 RHSA-2013:1791  View
206609 40880 CVE-2013-5606 RHSA-2013:1829  View
206610 40880 CVE-2013-5606 RHSA-2014:0041  View
206611 40880 CVE-2013-5606 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
206612 40880 CVE-2013-5606 GLSA-201406-19  View
206613 40880 CVE-2013-5606 DSA-2994  View
206614 40880 CVE-2013-5606 http://www.mozilla.org/security/announce/2013/mfsa2013-103.html  View
206615 40880 CVE-2013-5606 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
206616 40880 CVE-2013-5606 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
206617 40880 CVE-2013-5606 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
206618 40880 CVE-2013-5606 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
206619 40880 CVE-2013-5606 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
206620 40880 CVE-2013-5606 63737  View
206621 40880 CVE-2013-5606 USN-2030-1  View
206622 40880 CVE-2013-5606 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View
206623 40880 CVE-2013-5606 https://bugzilla.mozilla.org/show_bug.cgi?id=910438  View
206624 40880 CVE-2013-5606 https://developer.mozilla.org/docs/NSS/NSS_3.15.3_release_notes  View
206625 40880 CVE-2013-5606 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23591 JVNDB-2013-005166 Mozilla Network Security Services の lib/certhigh/certvfy.c におけるアクセス制限を回避される脆弱性 Mozilla Network Security Services (NSS) の lib/certhigh/certvfy.c 内の CERT_VerifyCert 関数は、CERTVerifyLog 変数が有効な場合、互換性のないキーを使用する証明書の予期しない戻り値を返すため、アクセス制限を回避される脆弱性が存在します。 CVE-2013-5606 65548 CVE-2013-5606 40880 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005166.html 2013-11-11 2016-01-29 View