QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2013-5606

Back to search

CVE-2013-5606

Published: Nov 16, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions via a crafted certificate.

VendorProductVersions

n/a

n/a

affected
n/a

References

63737
vdb-entry
x_refsource_BID
DSA-2994
vendor-advisory
x_refsource_DEBIAN
GLSA-201504-01
vendor-advisory
x_refsource_GENTOO
GLSA-201406-19
vendor-advisory
x_refsource_GENTOO
USN-2030-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2013:1791
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2013:1807
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2013:1732
vendor-advisory
x_refsource_SUSE
RHSA-2014:0041
vendor-advisory
x_refsource_REDHAT
RHSA-2013:1829
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now