BID:57777

Mozilla Network Security Services CVE-2013-1620 Information Disclosure Vulnerability

Info

Mozilla Network Security Services CVE-2013-1620 Information Disclosure Vulnerability

Bugtraq ID:	57777
Class:	Design Error
CVE:	CVE-2013-1620
Remote:	Yes
Local:	No
Published:	Feb 04 2013 12:00AM
Updated:	Oct 26 2016 04:09AM
Credit:	Nadhem J. AlFardan and Kenneth G. Paterson
Vulnerable:	VMWare ESX Server 4.1 VMWare ESX Server 4.0 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 12.2 S.u.S.E. openSUSE 12.1 Redhat Enterprise Virtualization Hypervisor for RHEL 6 0 Redhat Enterprise Virtualization 3 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Oracle VM Server for x86 3.4 Oracle VM Server for x86 3.3 Oracle VM Server for x86 3.2 Oracle Traffic Director 11.1.1 7 Oracle Traffic Director 11.1.1 6 Oracle Sun Java Application Server 8.2 Oracle Sun Java Application Server 8.1 Oracle Solaris 9 Oracle Solaris 8 Oracle Solaris 11.1 Oracle Solaris 10 Oracle Iplanet Web Server 7.0 SP2 Oracle Iplanet Web Server 6.1 Oracle iPlanet Web Proxy Server 4.0 Oracle GlassFish Enterprise Server 2.1.1 Oracle GlassFish Communications Server 2.0 Oracle Fusion Middleware 3.0-03 Oracle Enterprise Manager Ops Center 12.2 Oracle Enterprise Manager Ops Center 12.1 Oracle Enterprise Manager Ops Center 11.1 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Oracle Directory Server Enterprise Edition 7.0 Oracle Directory Server Enterprise Edition 11.1.1.7 Mozilla Network Security Services (NSS) 0 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Juniper CTPView 7.3 Juniper CTPView 7.1R2 Juniper CTPView 7.1r1 Juniper CTPView 4.6 Juniper CTPView 4.5 Juniper CTPView 4.4 Juniper CTPView 4.3 Juniper CTPView 4.2 Gentoo Linux F5 Enterprise Manager 3.1.1 F5 Enterprise Manager 3.1 F5 Enterprise Manager 3.0 F5 Enterprise Manager 2.3 F5 Enterprise Manager 2.1 F5 BIG-IQ Security 4.3 F5 BIG-IQ Security 4.2 F5 BIG-IQ Security 4.1 F5 BIG-IQ Security 4.0 F5 BIG-IQ Device 4.3 F5 BIG-IQ Device 4.2 F5 BIG-IQ Cloud 4.3 F5 BIG-IQ Cloud 4.2 F5 BIG-IQ Cloud 4.1 F5 BIG-IQ Cloud 4.0 F5 BIG-IP WOM 11.2 F5 BIG-IP WOM 11.0 F5 BIG-IP WOM 10.2.4 F5 BIG-IP WOM 10.2.2 F5 BIG-IP WOM 10.2.1 F5 BIG-IP WOM 10.0 F5 BIG-IP WOM 11.3.0 F5 BIG-IP WOM 11.2.1 HF5 F5 BIG-IP WOM 11.2.1 HF3 F5 BIG-IP WOM 11.2.1 F5 BIG-IP WOM 11.2.0 HF5 F5 BIG-IP WOM 11.2.0 HF3 F5 BIG-IP WOM 11.1.0 HF7 F5 BIG-IP WOM 11.1.0 F5 BIG-IP WOM 10.2.4 HF5 F5 BIG-IP WOM 10.2.1 HF1 F5 BIG-IP WebAccelerator 11.2.0 0 F5 BIG-IP WebAccelerator 11.3 F5 BIG-IP WebAccelerator 11.2.1 HF3 F5 BIG-IP WebAccelerator 11.2.1 F5 BIG-IP WebAccelerator 11.2 HF3 F5 BIG-IP WebAccelerator 11.1 F5 BIG-IP WebAccelerator 11.0 F5 BIG-IP WebAccelerator 10.2.4 F5 BIG-IP WebAccelerator 10.2.1 F5 BIG-IP WebAccelerator 10.0 F5 BIG-IP WebAccelerator 11.2.1 HF5 F5 BIG-IP WebAccelerator 11.2.0 HF5 F5 BIG-IP WebAccelerator 11.1.0 HF7 F5 BIG-IP WebAccelerator 10.2.4 HF5 F5 BIG-IP WebAccelerator 10.2.1 HF1 F5 BIG-IP PSM 11.5.1 F5 BIG-IP PSM 11.5 F5 BIG-IP PSM 11.4.1 F5 BIG-IP PSM 11.3 F5 BIG-IP PSM 11.2 F5 BIG-IP PSM 11.1 F5 BIG-IP PSM 11.0 F5 BIG-IP PSM 10.2.4 F5 BIG-IP PSM 10.2.1 F5 BIG-IP PSM 10.0 F5 BIG-IP PSM 11.3.0 HF4 F5 BIG-IP PSM 11.2.1 HF5 F5 BIG-IP PSM 11.2.1 HF3 F5 BIG-IP PSM 11.2.1 HF2 F5 BIG-IP PSM 11.2.1 HF1 F5 BIG-IP PSM 11.2.1 F5 BIG-IP PSM 11.2.0 HF5 F5 BIG-IP PSM 11.2.0 HF3 F5 BIG-IP PSM 11.2.0 HF2 F5 BIG-IP PSM 11.1.0 HF7 F5 BIG-IP PSM 10.2.4 HF5 F5 BIG-IP PSM 10.2.4 HF4 F5 BIG-IP PSM 10.2.1 HF1 F5 BIG-IP PEM 11.5.1 F5 BIG-IP PEM 11.5 F5 BIG-IP PEM 11.3 F5 BIG-IP PEM 11.6.0 F5 BIG-IP PEM 11.4.1 F5 BIG-IP PEM 11.3.0 HF4 F5 BIG-IP LTM 11.5.1 F5 BIG-IP LTM 11.5 F5 BIG-IP LTM 11.2.1 HF3 F5 BIG-IP LTM 11.2 HF3 F5 BIG-IP LTM 11.2 F5 BIG-IP LTM 11.0 F5 BIG-IP LTM 10.2.4 F5 BIG-IP LTM 10.2.2 F5 BIG-IP LTM 10.0 F5 BIG-IP LTM 11.6.0 F5 BIG-IP LTM 11.5 F5 BIG-IP LTM 11.4.1 F5 BIG-IP LTM 11.3.0 HF4 F5 BIG-IP LTM 11.3.0 F5 BIG-IP LTM 11.2.1 HF5 F5 BIG-IP LTM 11.2.1 HF2 F5 BIG-IP LTM 11.2.1 HF1 F5 BIG-IP LTM 11.2.1 F5 BIG-IP LTM 11.2.0 HF5 F5 BIG-IP LTM 11.2.0 HF2 F5 BIG-IP LTM 11.1.0 HF7 F5 BIG-IP LTM 11.1.0 F5 BIG-IP LTM 10.2.4 HF5 F5 BIG-IP LTM 10.2.4 HF4 F5 BIG-IP LTM 10.2.1 HF1 F5 BIG-IP LTM 10.2.1 F5 BIG-IP Link Controller 11.2.0 0 F5 BIG-IP Link Controller 11.5.1 F5 BIG-IP Link Controller 11.5 F5 BIG-IP Link Controller 11.3 F5 BIG-IP Link Controller 11.2.1 HF3 F5 BIG-IP Link Controller 11.2.1 F5 BIG-IP Link Controller 11.2 HF3 F5 BIG-IP Link Controller 11.1 F5 BIG-IP Link Controller 11.0 F5 BIG-IP Link Controller 10.2.4 F5 BIG-IP Link Controller 10.2.2 F5 BIG-IP Link Controller 10.2.1 F5 BIG-IP Link Controller 10.0 F5 BIG-IP Link Controller 11.4.1 F5 BIG-IP Link Controller 11.3.0 HF4 F5 BIG-IP Link Controller 11.2.1 HF5 F5 BIG-IP Link Controller 11.2.1 HF2 F5 BIG-IP Link Controller 11.2.1 HF1 F5 BIG-IP Link Controller 11.2.0 HF5 F5 BIG-IP Link Controller 11.2.0 HF2 F5 BIG-IP Link Controller 11.1.0 HF7 F5 BIG-IP Link Controller 10.2.4 HF5 F5 BIG-IP Link Controller 10.2.4 HF4 F5 BIG-IP Link Controller 10.2.1 HF1 F5 BIG-IP GTM 11.5.1 F5 BIG-IP GTM 11.5 F5 BIG-IP GTM 11.3 F5 BIG-IP GTM 11.2.1 HF3 F5 BIG-IP GTM 11.2 F5 BIG-IP GTM 11.0 F5 BIG-IP GTM 10.2.4 F5 BIG-IP GTM 10.2.2 F5 BIG-IP GTM 10.2.1 F5 BIG-IP GTM 10.0 F5 BIG-IP GTM 11.4.1 F5 BIG-IP GTM 11.3.0 HF4 F5 BIG-IP GTM 11.2.1 HF5 F5 BIG-IP GTM 11.2.1 HF2 F5 BIG-IP GTM 11.2.1 HF1 F5 BIG-IP GTM 11.2.1 F5 BIG-IP GTM 11.2.0 HF5 F5 BIG-IP GTM 11.2.0 HF3 F5 BIG-IP GTM 11.2.0 HF2 F5 BIG-IP GTM 11.1.0 HF7 F5 BIG-IP GTM 11.1.0 F5 BIG-IP GTM 10.2.4 HF5 F5 BIG-IP GTM 10.2.4 HF4 F5 BIG-IP GTM 10.2.1 HF1 F5 BIG-IP Edge Gateway 11.3 F5 BIG-IP Edge Gateway 11.2.1 HF3 F5 BIG-IP Edge Gateway 11.2.1 F5 BIG-IP Edge Gateway 11.2 HF3 F5 BIG-IP Edge Gateway 11.2 F5 BIG-IP Edge Gateway 11.1 F5 BIG-IP Edge Gateway 11.0 F5 BIG-IP Edge Gateway 10.2.4 F5 BIG-IP Edge Gateway 10.2.2 F5 BIG-IP Edge Gateway 10.2.1 F5 BIG-IP Edge Gateway 10.1 F5 BIG-IP Edge Gateway 11.2.1 HF5 F5 BIG-IP Edge Gateway 11.2.1 HF2 F5 BIG-IP Edge Gateway 11.2.0 HF5 F5 BIG-IP Edge Gateway 11.1.0 HF7 F5 BIG-IP Edge Gateway 10.2.4 HF5 F5 BIG-IP Edge Gateway 10.2.4 HF4 F5 BIG-IP Edge Gateway 10.2.1 HF1 F5 BIG-IP Edge Gateway 10.1 F5 BIG-IP ASM 11.2.0 HF2 0 F5 BIG-IP ASM 11.2.0 0 F5 BIG-IP ASM 11.0.0 0 F5 BIG-IP ASM 10.2.4 0 F5 BIG-IP ASM 10.0.0 0 F5 BIG-IP ASM 11.5.1 F5 BIG-IP ASM 11.5 F5 BIG-IP ASM 10.2.2 F5 BIG-IP ASM 10.2.1 F5 BIG-IP ASM 11.4.1 F5 BIG-IP ASM 11.3.0 HF4 F5 BIG-IP ASM 11.3.0 F5 BIG-IP ASM 11.2.1 HF5 F5 BIG-IP ASM 11.2.1 HF3 F5 BIG-IP ASM 11.2.1 HF2 F5 BIG-IP ASM 11.2.1 HF1 F5 BIG-IP ASM 11.2.1 F5 BIG-IP ASM 11.2.0 HF5 F5 BIG-IP ASM 11.2.0 HF3 F5 BIG-IP ASM 11.1.0 HF7 F5 BIG-IP ASM 11.1.0 F5 BIG-IP ASM 10.2.4 HF5 F5 BIG-IP ASM 10.2.4 HF4 F5 BIG-IP ASM 10.2.1 HF1 F5 BIG-IP APM 11.5.1 F5 BIG-IP APM 11.2 F5 BIG-IP APM 11.0 F5 BIG-IP APM 10.2.4 F5 BIG-IP APM 10.2.2 F5 BIG-IP APM 10.0 F5 BIG-IP APM 11.5.0 F5 BIG-IP APM 11.4.1 F5 BIG-IP APM 11.4.0 F5 BIG-IP APM 11.3.0 HF4 F5 BIG-IP APM 11.3.0 F5 BIG-IP APM 11.2.1 HF5 F5 BIG-IP APM 11.2.1 HF3 F5 BIG-IP APM 11.2.1 HF2 F5 BIG-IP APM 11.2.1 HF1 F5 BIG-IP APM 11.2.1 F5 BIG-IP APM 11.2.0 HF5 F5 BIG-IP APM 11.2.0 HF3 F5 BIG-IP APM 11.2.0 HF2 F5 BIG-IP APM 11.1.0 HF7 F5 BIG-IP APM 11.1.0 F5 BIG-IP APM 10.2.4 HF5 F5 BIG-IP APM 10.2.4 HF4 F5 BIG-IP APM 10.2.1 HF1 F5 BIG-IP APM 10.2.1 F5 BIG-IP APM 10.1 F5 BIG-IP Analytics 11.5.1 F5 BIG-IP Analytics 11.5 F5 BIG-IP Analytics 11.3 F5 BIG-IP Analytics 11.2.1 HF3 F5 BIG-IP Analytics 11.2.1 F5 BIG-IP Analytics 11.2 HF3 F5 BIG-IP Analytics 11.2 F5 BIG-IP Analytics 11.6.0 F5 BIG-IP Analytics 11.4.1 F5 BIG-IP Analytics 11.3.0 HF4 F5 BIG-IP Analytics 11.2.1 HF5 F5 BIG-IP Analytics 11.2.1 HF2 F5 BIG-IP Analytics 11.2.1 HF1 F5 BIG-IP Analytics 11.2.0 HF5 F5 BIG-IP Analytics 11.2.0 HF2 F5 BIG-IP Analytics 11.1.0 HF7 F5 BIG-IP Analytics 11.1.0 F5 BIG-IP Analytics 11.0.0-HF2 F5 BIG-IP Analytics 11.0.0 F5 BIG-IP AFM 11.5.1 F5 BIG-IP AFM 11.5 F5 BIG-IP AFM 11.3 F5 BIG-IP AFM 11.2.1 F5 BIG-IP AFM 11.6.0 F5 BIG-IP AFM 11.4.1 F5 BIG-IP AFM 11.3.0 HF4 F5 BIG-IP AAM 11.5.1 F5 BIG-IP AAM 11.5 F5 BIG-IP AAM 11.6.0 F5 BIG-IP AAM 11.4.1 F5 BIG-IP AAM 11.4.0 CentOS CentOS 6 CentOS CentOS 5 Avaya Voice Portal 5.1.3 Avaya Voice Portal 5.1.2 Avaya Voice Portal 5.1.1 Avaya Voice Portal 5.1 SP3 Avaya Voice Portal 5.1 SP2 Avaya Voice Portal 5.1 SP1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.0 SP2 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya Proactive Contact 5.1 Avaya Proactive Contact 5.0 Avaya one-X Client Enablement Services 6.2 Avaya one-X Client Enablement Services 6.1.2 Avaya one-X Client Enablement Services 6.1.1 Avaya one-X Client Enablement Services 6.1 Avaya one-X Client Enablement Services 6.0 Avaya Meeting Exchange 5.2 SP2 Avaya Meeting Exchange 5.2 SP1 Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 SP1 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 SP2 Avaya Meeting Exchange 5.0 SP1 Avaya Meeting Exchange 5.0 Avaya IQ 5.2 Avaya IQ 5.1.1 Avaya IQ 5.1 Avaya IQ 5 Avaya IP Office Server Edition 9.0 Avaya IP Office Server Edition 8.1 Avaya IP Office Server Edition 8.0 Avaya IP Office Application Server 9.0 Avaya IP Office Application Server 8.1 Avaya IP Office Application Server 8.0 Avaya Communication Server 1000M Signaling Server 7.6 Avaya Communication Server 1000M Signaling Server 7.5 Avaya Communication Server 1000M Signaling Server 7.0 Avaya Communication Server 1000M Signaling Server 6.0 Avaya Communication Server 1000M 7.6 Avaya Communication Server 1000M 7.5 Avaya Communication Server 1000M 7.0 Avaya Communication Server 1000M 6.0 Avaya Communication Server 1000E Signaling Server 7.6 Avaya Communication Server 1000E Signaling Server 7.5 Avaya Communication Server 1000E Signaling Server 7.0 Avaya Communication Server 1000E Signaling Server 6.0 Avaya Communication Server 1000E 7.6 Avaya Communication Server 1000E 7.5 Avaya Communication Server 1000E 7.0 Avaya Communication Server 1000E 6.0 Avaya CMS r17 Avaya Aura System Platform 6.2.2 Avaya Aura System Platform 6.2.1 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.3 Avaya Aura System Platform 6.2.1.0.9 Avaya Aura System Platform 6.2 SP1 Avaya Aura System Platform 6.2 Avaya Aura System Platform 6.0.3.9.3 Avaya Aura System Platform 6.0.3.8.3 Avaya Aura System Platform 6.0.3.0.3 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.1 Avaya Aura System Platform 1.0 Avaya Aura System Manager 6.3.2 Avaya Aura System Manager 6.3.1 Avaya Aura System Manager 6.3 Avaya Aura System Manager 6.2.3 Avaya Aura System Manager 6.2 SP3 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.5 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura System Manager 5.2 Avaya Aura System Manager 5.0 Avaya Aura Session Manager 6.3.1 Avaya Aura Session Manager 6.2.1 Avaya Aura Session Manager 6.1.5 Avaya Aura Session Manager 6.1.3 Avaya Aura Session Manager 6.1.2 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.0.1 Avaya Aura Session Manager 6.3 Avaya Aura Session Manager 6.2.3 Avaya Aura Session Manager 6.2.2 Avaya Aura Session Manager 6.2 SP1 Avaya Aura Session Manager 6.2 Avaya Aura Session Manager 6.1 SP2 Avaya Aura Session Manager 6.1 Sp1 Avaya Aura Session Manager 6.1 Avaya Aura Session Manager 6.0.2 Avaya Aura Session Manager 6.0 SP1 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2.4 Avaya Aura Session Manager 5.2.1 Avaya Aura Session Manager 5.2 SP2 Avaya Aura Session Manager 5.2 SP1 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 5.0 Avaya Aura Session Manager 1.1.1 Avaya Aura Session Manager 1.1 Avaya Aura Session Manager 1.0 Avaya Aura Presence Services 6.1.2 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.2 Avaya Aura Presence Services 6.1 SP2 Avaya Aura Presence Services 6.1 SP1 Avaya Aura Presence Services 6.1 Avaya Aura Presence Services 6.0 Avaya Aura Messaging 6.1.1 Avaya Aura Messaging 6.2 Avaya Aura Messaging 6.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Messaging 6.0.1 Avaya Aura Messaging 6.0 Avaya Aura Experience Portal 6.0.2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Experience Portal 6.0.1 Avaya Aura Experience Portal 6.0 Avaya Aura Conferencing 7.0 Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Communication Manager Utility Services 6.3 Avaya Aura Communication Manager Utility Services 6.2.5.0.15 Avaya Aura Communication Manager Utility Services 6.2.4.0.15 Avaya Aura Communication Manager Utility Services 6.2 Avaya Aura Communication Manager Utility Services 6.1.0.9.8 Avaya Aura Communication Manager Utility Services 6.1 SP 6.1.0.9.8 Avaya Aura Communication Manager Utility Services 6.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager 6.3 Avaya Aura Communication Manager 6.2 Avaya Aura Communication Manager 6.0.1 Avaya Aura Communication Manager 6.0 Avaya Aura Collaboration Environment 2.0 Avaya Aura Application Server 5300 SIP Core 3.0 PB5 Avaya Aura Application Server 5300 SIP Core 3.0 PB3 Avaya Aura Application Server 5300 SIP Core 3.0 Avaya Aura Application Server 5300 SIP Core 2.1 Avaya Aura Application Server 5300 SIP Core 2.0 PB28 Avaya Aura Application Server 5300 SIP Core 2.0 PB26 Avaya Aura Application Server 5300 SIP Core 2.0 PB25 Avaya Aura Application Server 5300 SIP Core 2.0 PB23 Avaya Aura Application Server 5300 SIP Core 2.0 PB19 Avaya Aura Application Server 5300 SIP Core 2.0 PB16 Avaya Aura Application Server 5300 SIP Core 2.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 6.2 Avaya Aura Application Enablement Services 6.1.2 Avaya Aura Application Enablement Services 6.1.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 6.0 Avaya Aura Application Enablement Services 5.2.4 Avaya Aura Application Enablement Services 5.2.3 Avaya Aura Application Enablement Services 5.2.2 Avaya Aura Application Enablement Services 5.2 Avaya Aura Application Enablement Services 5.0

Not Vulnerable:	Oracle Solaris 11.1.20.5.0 Juniper CTPView 7.3R1 Juniper CTPView 7.1R3 Juniper CTPView 7.0R1

Discussion

Mozilla Network Security Services CVE-2013-1620 Information Disclosure Vulnerability

Mozilla Network Security Services (NSS) is prone to an information disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

Exploit / POC

Mozilla Network Security Services CVE-2013-1620 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

Mozilla Network Security Services CVE-2013-1620 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.

References

Mozilla Network Security Services CVE-2013-1620 Information Disclosure Vulnerability

References:

CVE request: TLS CBC padding timing flaw in various SSL / TLS implementations (cve-assign)
Lucky Thirteen: Breaking the TLS and DTLS Record Protocols (Nadhem Alfardan and Kenny Paterson)
Network Security Services (NSS) Homepage (Mozilla)
nss and nspr security, bug fix, and enhancement update (RHSA-2013-1135) (Avaya)
SOL15630: TLS in Mozilla NSS vulnerability CVE-2013-1620 (F5 Networks)
Multiple vulnerabilities fixed in NSS 3.16 (Oracle)
2014-11 Security Bulletin: CTPView: Multiple Security vulnerabilities resolved b (Juniper)
2016-10 Security Bulletin: CTPView: Multiple vulnerabilities in CTPView (Juniper)
CVE-2013-1620 Lucky Thirteen vulnerability in NSS (Oracle)
nss, nspr, and nss-util security update (RHSA-2013-1829) (Avaya)
nss, nss-util, nss-softokn, and nspr security update (RHSA-2013-1144) (Avaya)
Oracle Critical Patch Update Advisory - April 2014 (Oracle)
Oracle Critical Patch Update Advisory - January 2014 (Oracle)
Oracle Critical Patch Update Advisory - January 2015 Oracle Advisory (Oracle)
Oracle Critical Patch Update Advisory - July 2014 (Oracle)
Oracle VM Server for x86 Bulletin - July 2016 (Oracle)
Security Advisory Moderate: rhev-hypervisor6 security and bug fix update (Red Hat)
VMSA-2013-0015 (VMware)