CVE-2014-1492 in Mozilla Network Security Services

요약 (영어)

The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name s U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.

예약하다

2014. 01. 16.

공개

2014. 03. 25.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
12685	Mozilla Network Security Services p12creat.c sec_pkcs12_new_asafe 권한 상승	20	입증되지 않음	공식 수정	CVE-2014-1492
12684	Mozilla Network Security Services Domain Name 권한 상승	20	입증되지 않음	공식 수정	CVE-2014-1492