Mozilla Network Security Services CVE-2014-1491 Unspecified Security Vulnerability

Bugtraq ID:	65332
Class:	Unknown
CVE:	CVE-2014-1491
Remote:	Yes
Local:	No
Published:	Feb 04 2014 12:00AM
Updated:	Oct 26 2016 04:09AM
Credit:	Brian Smith, Antoine Delignat-Lavaud and Karthikeyan Bhargavan
Vulnerable:	Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 12.10 Ubuntu Ubuntu Linux 12.04 LTS SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 SuSE SUSE Linux Enterprise Server for VMware 11 SP3 SuSE SUSE Linux Enterprise Server 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 11.4 Redhat Enterprise Virtualization Hypervisor for RHEL 6 0 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Oracle VM Server for x86 3.4 Oracle VM Server for x86 3.3 Oracle VM Server for x86 3.2 Oracle Solaris 9 Oracle Solaris 8 Oracle Solaris 10 Oracle Enterprise Manager Ops Center 12.1.0.1 Oracle Enterprise Manager Ops Center 12.1 Oracle Enterprise Manager Ops Center 11.1.3 Oracle Enterprise Manager Ops Center 11.1 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Mozilla Thunderbird 24.1.1 Mozilla Thunderbird 24.0.1 Mozilla Thunderbird 17.0.7 Mozilla Thunderbird 17.0.6 Mozilla Thunderbird 17.0.5 Mozilla Thunderbird 17.0.4 Mozilla Thunderbird 17.0.3 Mozilla Thunderbird 17.0.2 Mozilla Thunderbird 17.0.1 Mozilla Thunderbird 16.0.2 Mozilla Thunderbird 15.0.1 Mozilla Thunderbird 12.0.1 Mozilla Thunderbird 24.2 Mozilla Thunderbird 24.1 Mozilla Thunderbird 24.0 Mozilla Thunderbird 17.0.9 Mozilla Thunderbird 17.0.8 Mozilla Thunderbird 17.0 Mozilla Thunderbird 16.0.1 Mozilla Thunderbird 16.0 Mozilla Thunderbird 16 Mozilla Thunderbird 15 Mozilla Thunderbird 14.0 Mozilla Thunderbird 11.0.1 Mozilla Thunderbird 10.0.4 Mozilla Thunderbird 10.0.1 Mozilla SeaMonkey 2.22.1 Mozilla SeaMonkey 2.17.1 Mozilla SeaMonkey 2.16.2 Mozilla SeaMonkey 2.16.1 Mozilla SeaMonkey 2.15.1 Mozilla SeaMonkey 2.13.2 Mozilla SeaMonkey 2.10.1 Mozilla SeaMonkey 2.0.11 Mozilla SeaMonkey 2.0.9 Mozilla SeaMonkey 2.0.8 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.3 Mozilla SeaMonkey 2.0.2 Mozilla SeaMonkey 2.0.1 Mozilla SeaMonkey 1.1.12 Mozilla SeaMonkey 2.9.1 Mozilla SeaMonkey 2.9 Beta4 Mozilla SeaMonkey 2.9 Beta3 Mozilla SeaMonkey 2.9 Beta2 Mozilla SeaMonkey 2.9 Beta1 Mozilla SeaMonkey 2.9 Mozilla SeaMonkey 2.8 Beta6 Mozilla SeaMonkey 2.8 Beta5 Mozilla SeaMonkey 2.8 Beta4 Mozilla SeaMonkey 2.8 Beta3 Mozilla SeaMonkey 2.8 Beta2 Mozilla SeaMonkey 2.8 Beta1 Mozilla SeaMonkey 2.8 Mozilla SeaMonkey 2.7.2 Mozilla SeaMonkey 2.7.1 Mozilla SeaMonkey 2.7 Beta5 Mozilla SeaMonkey 2.7 Beta4 Mozilla SeaMonkey 2.7 Beta3 Mozilla SeaMonkey 2.7 Beta2 Mozilla SeaMonkey 2.7 Beta1 Mozilla SeaMonkey 2.7 Mozilla SeaMonkey 2.6.1 Mozilla SeaMonkey 2.6 Beta4 Mozilla SeaMonkey 2.6 Beta3 Mozilla SeaMonkey 2.6 Beta2 Mozilla SeaMonkey 2.6 Beta1 Mozilla SeaMonkey 2.6 Mozilla SeaMonkey 2.5 Beta4 Mozilla SeaMonkey 2.5 Beta3 Mozilla SeaMonkey 2.5 Beta2 Mozilla SeaMonkey 2.5 Beta1 Mozilla SeaMonkey 2.5 Mozilla SeaMonkey 2.4 Beta3 Mozilla SeaMonkey 2.4 Beta2 Mozilla SeaMonkey 2.4 Beta1 Mozilla SeaMonkey 2.4 Mozilla SeaMonkey 2.3.1 Mozilla SeaMonkey 2.3 Beta3 Mozilla SeaMonkey 2.3 Beta2 Mozilla SeaMonkey 2.3 Beta1 Mozilla SeaMonkey 2.3 Mozilla SeaMonkey 2.23 Beta1 Mozilla SeaMonkey 2.23 Mozilla SeaMonkey 2.22 Beta2 Mozilla SeaMonkey 2.22 Beta1 Mozilla SeaMonkey 2.22 Mozilla SeaMonkey 2.21 Beta2 Mozilla SeaMonkey 2.21 Beta1 Mozilla SeaMonkey 2.21 Mozilla SeaMonkey 2.20 Beta3 Mozilla SeaMonkey 2.20 Beta2 Mozilla SeaMonkey 2.20 Beta1 Mozilla SeaMonkey 2.20 Mozilla SeaMonkey 2.2 Beta3 Mozilla SeaMonkey 2.2 Beta2 Mozilla SeaMonkey 2.2 Beta1 Mozilla SeaMonkey 2.2 Mozilla SeaMonkey 2.1b2 Mozilla SeaMonkey 2.19 Beta2 Mozilla SeaMonkey 2.19 Beta1 Mozilla SeaMonkey 2.19 Mozilla SeaMonkey 2.18 Beta4 Mozilla SeaMonkey 2.18 Beta3 Mozilla SeaMonkey 2.18 Beta2 Mozilla SeaMonkey 2.18 Beta1 Mozilla SeaMonkey 2.17 Beta4 Mozilla SeaMonkey 2.17 Beta3 Mozilla SeaMonkey 2.17 Beta2 Mozilla SeaMonkey 2.17 Beta1 Mozilla SeaMonkey 2.17 Mozilla SeaMonkey 2.16 Beta5 Mozilla SeaMonkey 2.16 Beta4 Mozilla SeaMonkey 2.16 Beta3 Mozilla SeaMonkey 2.16 Beta2 Mozilla SeaMonkey 2.16 Beta1 Mozilla SeaMonkey 2.16 Mozilla SeaMonkey 2.15.2 Mozilla SeaMonkey 2.15 Beta6 Mozilla SeaMonkey 2.15 Beta5 Mozilla SeaMonkey 2.15 Beta4 Mozilla SeaMonkey 2.15 Beta3 Mozilla SeaMonkey 2.15 Beta2 Mozilla SeaMonkey 2.15 Beta1 Mozilla SeaMonkey 2.15 Mozilla SeaMonkey 2.14 Beta5 Mozilla SeaMonkey 2.14 Beta4 Mozilla SeaMonkey 2.14 Beta3 Mozilla SeaMonkey 2.14 Beta2 Mozilla SeaMonkey 2.14 Beta1 Mozilla SeaMonkey 2.14 Mozilla SeaMonkey 2.13.1 Mozilla SeaMonkey 2.13 Beta6 Mozilla SeaMonkey 2.13 Beta5 Mozilla SeaMonkey 2.13 Beta4 Mozilla SeaMonkey 2.13 Beta3 Mozilla SeaMonkey 2.13 Beta2 Mozilla SeaMonkey 2.13 Beta1 Mozilla SeaMonkey 2.13 Mozilla SeaMonkey 2.12.1 Mozilla SeaMonkey 2.12 Beta6 Mozilla SeaMonkey 2.12 Beta5 Mozilla SeaMonkey 2.12 Beta4 Mozilla SeaMonkey 2.12 Beta3 Mozilla SeaMonkey 2.12 Beta2 Mozilla SeaMonkey 2.12 Beta1 Mozilla SeaMonkey 2.12 Mozilla SeaMonkey 2.11 Beta6 Mozilla SeaMonkey 2.11 Beta5 Mozilla SeaMonkey 2.11 Beta4 Mozilla SeaMonkey 2.11 Beta3 Mozilla SeaMonkey 2.11 Beta2 Mozilla SeaMonkey 2.11 Beta1 Mozilla SeaMonkey 2.11 Mozilla SeaMonkey 2.10 Beta3 Mozilla SeaMonkey 2.10 Beta2 Mozilla SeaMonkey 2.10 Beta1 Mozilla SeaMonkey 2.10 Mozilla SeaMonkey 2.1 Rc2 Mozilla SeaMonkey 2.1 Rc1 Mozilla SeaMonkey 2.1 Beta3 Mozilla SeaMonkey 2.1 Beta2 Mozilla SeaMonkey 2.1 Beta1 Mozilla SeaMonkey 2.1 Alpha3 Mozilla SeaMonkey 2.1 Alpha2 Mozilla SeaMonkey 2.1 Alpha1 Mozilla SeaMonkey 2.1 Mozilla SeaMonkey 2.0.7 Mozilla SeaMonkey 2.0.6 Mozilla SeaMonkey 2.0.4 Mozilla SeaMonkey 2.0.14 Mozilla SeaMonkey 2.0.13 Mozilla SeaMonkey 2.0.12 Mozilla SeaMonkey 2.0.10 Mozilla SeaMonkey 2.0 Rc2 Mozilla SeaMonkey 2.0 Rc1 Mozilla SeaMonkey 2.0 Beta 2 Mozilla SeaMonkey 2.0 Beta 1 Mozilla SeaMonkey 2.0 Alpha 3 Mozilla SeaMonkey 2.0 Alpha 2 Mozilla SeaMonkey 2.0 Alpha 1 Mozilla SeaMonkey 2.0 Mozilla Network Security Services (NSS) 3.15.3 Mozilla Network Security Services (NSS) 3.15.2 Mozilla Network Security Services (NSS) 3.15.1 Mozilla Network Security Services (NSS) 3.12.5 Mozilla Network Security Services (NSS) 3.12.3 Mozilla Network Security Services (NSS) 3.12.2 Mozilla Network Security Services (NSS) 3.11.3 Mozilla Network Security Services (NSS) 3.9.2 Mozilla Network Security Services (NSS) 3.9 + Mozilla Browser 1.5 Mozilla Network Security Services (NSS) 3.8 Mozilla Network Security Services (NSS) 3.7.7 Mozilla Network Security Services (NSS) 3.7.5 Mozilla Network Security Services (NSS) 3.7.3 Mozilla Network Security Services (NSS) 3.7.2 Mozilla Network Security Services (NSS) 3.7.1 Mozilla Network Security Services (NSS) 3.7 Mozilla Network Security Services (NSS) 3.6.1 Mozilla Network Security Services (NSS) 3.6 Mozilla Network Security Services (NSS) 3.5 Mozilla Network Security Services (NSS) 3.4.2 Mozilla Network Security Services (NSS) 3.4.1 Mozilla Network Security Services (NSS) 3.4 Mozilla Network Security Services (NSS) 3.3.2 Mozilla Network Security Services (NSS) 3.3.1 Mozilla Network Security Services (NSS) 3.3 Mozilla Network Security Services (NSS) 3.2.1 Mozilla Network Security Services (NSS) 3.2 Mozilla Network Security Services (NSS) 3.13.4 Mozilla Network Security Services (NSS) 3.13.3 Mozilla Network Security Services (NSS) 3.12.6 Mozilla Network Security Services (NSS) 3.12 Mozilla Network Security Services (NSS) 3.11 Mozilla Network Security Services (NSS) 0 Mozilla Firefox ESR 24.1 Mozilla Firefox ESR 24.0.1 Mozilla Firefox ESR 17.0.10 Mozilla Firefox ESR 17.0.9 Mozilla Firefox ESR 17.0.7 Mozilla Firefox ESR 17.0.6 Mozilla Firefox ESR 17.0.5 Mozilla Firefox ESR 17.0.4 Mozilla Firefox ESR 17.0.3 Mozilla Firefox ESR 17.0.2 Mozilla Firefox ESR 17.0.1 Mozilla Firefox ESR 10.0.12 Mozilla Firefox ESR 10.0.10 Mozilla Firefox ESR 10.0.8 Mozilla Firefox ESR 10.0.7 Mozilla Firefox ESR 10.0.5 Mozilla Firefox ESR 10.0.4 Mozilla Firefox ESR 10.0.3 Mozilla Firefox ESR 24.2 Mozilla Firefox ESR 24.1.1 Mozilla Firefox ESR 24.1 Mozilla Firefox ESR 24.0.2 Mozilla Firefox ESR 24.0 Mozilla Firefox ESR 17.0.8 Mozilla Firefox ESR 17.0 Mozilla Firefox ESR 10.0.9 Mozilla Firefox ESR 10.0.6 Mozilla Firefox ESR 10.0.2 Mozilla Firefox ESR 10.0.11 Mozilla Firefox ESR 10.0.1 Mozilla Firefox ESR 10.0 Mozilla Firefox 25.0.1 Mozilla Firefox 24.1.1 Mozilla Firefox 19.0.2 Mozilla Firefox 19.0.1 Mozilla Firefox 17.0.7 Mozilla Firefox 17.0.4 Mozilla Firefox 17.0.3 Mozilla Firefox 16.0.2 Mozilla Firefox 10.0.12 Mozilla Firefox 26.0 Mozilla Firefox 26 Mozilla Firefox 25.0 Mozilla Firefox 24.1 Mozilla Firefox 24.0 Mozilla Firefox 23.0.1 Mozilla Firefox 23.0 Mozilla Firefox 22.0 Mozilla Firefox 21.0 Mozilla Firefox 20.0.1 Mozilla Firefox 20.0 Mozilla Firefox 19.0 Mozilla Firefox 18.0.2 Mozilla Firefox 17.0.9 Mozilla Firefox 17.0.11 Mozilla Firefox 17.0 Mozilla Firefox 15 Mozilla Firefox 12.0 Beta6 Mozilla Firefox 11.0 Mozilla Firefox 10.0.3 Juniper CTPView 7.3 Juniper CTPView 7.1R2 Juniper CTPView 7.1r1 IBM TSSC 7.3.15 IBM TSSC 7.3 IBM TSSC 7.0 IBM Security Network Protection (XGS) 5100 5.1.2 1 IBM Security Network Protection (XGS) 5100 5.1.2 IBM Security Network Protection (XGS) 5100 5.1.1 IBM Security Network Protection (XGS) 5100 5.2 IBM Security Network Protection (XGS) 5100 5.1 IBM Security Network Protection (XGS) 4100 5.1.2 1 IBM Security Network Protection (XGS) 4100 5.1.2 IBM Security Network Protection (XGS) 4100 5.1.1 IBM Security Network Protection (XGS) 4100 5.2 IBM Security Network Protection (XGS) 4100 5.1 IBM Security Network Protection (XGS) 3100 5.1.2 1 IBM Security Network Protection (XGS) 3100 5.1.2 IBM Security Network Protection (XGS) 3100 5.1.1 IBM Security Network Protection (XGS) 3100 5.2 IBM Security Network Protection (XGS) 3100 5.1 IBM FlashSystem 840 9848G-AC0 IBM FlashSystem 840 9848-AE1 IBM FlashSystem 840 9846G-AC0 IBM FlashSystem 840 9846-AE1 IBM FlashSystem 840 9843-AE1 IBM FlashSystem 840 9840-AE1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 6 CentOS CentOS 5
Not Vulnerable:	Oracle Enterprise Manager Ops Center 12.3 Oracle Enterprise Manager Ops Center 12.2.1 Oracle Enterprise Manager Ops Center 12.2 Oracle Enterprise Manager Ops Center 12.1.4 Mozilla Thunderbird 24.3 Mozilla SeaMonkey 2.24 Mozilla Network Security Services (NSS) 3.15.4 Mozilla Firefox ESR 24.3 Mozilla Firefox ESR 17.0.11 Mozilla Firefox 27 Juniper CTPView 7.3R1 Juniper CTPView 7.1R3 IBM TSSC 7.3.16

Mozilla Network Security Services CVE-2014-1491 Unspecified Security Vulnerability

Mozilla Network Security Services is prone to an unspecified security vulnerability.

Little is known about this issue or its effects at this time. We will update this BID as more information emerges.

Mozilla Network Security Services CVE-2014-1491 Unspecified Security Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Mozilla Network Security Services CVE-2014-1491 Unspecified Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Mozilla Network Security Services CVE-2014-1491 Unspecified Security Vulnerability

References:

• Mozilla Firefox Homepage (Mozilla)
  
• Mozilla Foundation Security Advisory 2014-12 (Mozilla)
  
• Mozilla Thunderbird Homepage (Mozilla )
  
• NSS Homepage (Mozilla Foundation)
  
• SeaMonkey Homepage (Mozilla)
  
• Security Bulletin: IBM Security Network Protection is affected by multiple vulne (IBM)
  
• TS3000 code level 7.x affected by various vulnerabilities (IBM)
  
• Multiple vulnerabilities fixed in NSS 3.16 (Oracle)
  
• 2016-10 Security Bulletin: CTPView: Multiple vulnerabilities in CTPView (Juniper)
  
• Oracle Critical Patch Update Advisory - January 2016 (Oracle)
  
• Oracle VM Server for x86 Bulletin - July 2016 (Oracle)
  
• Six (6) Vulnerabilities in Network Security Services (NSS) & Netscape Portable R (IBM)