Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Openldap | — | Upgrade macOS to the latest versionApply OS X security update 2009-006 | Dec 16, 2011 | Jul 30, 2009 |
| Debian | — | Upgrade nss | Jul 30, 2024 | Jul 30, 2009 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-firefox-develUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-seamonkey-devel | Dec 10, 2025 | Aug 4, 2009 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Jul 30, 2009 |
| Ibm Aix | — | Apply the fix or workaround for sendmail_advisory | Nov 30, 2017 | Jul 30, 2009 |
| Mfsa2009 42 | — | Upgrade to Mozilla Firefox version 3.0.13Upgrade to Mozilla Firefox version 3.5 | Jun 14, 2012 | Jul 30, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.18 | Feb 3, 2012 | Jul 30, 2009 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.23 | Feb 22, 2012 | Jul 30, 2009 |
| Oracle Solaris | — | Upgrade web/php-53/documentation to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-pear to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-tcpwrap to version 1.1.3-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-memcache to version 2.2.5-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/server/apache-22/module/apache-php52 to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-suhosin to version 0.9.33-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/documentation to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-tcpwrap to version 1.1.3-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-common to version 11.1-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-apc to version 3.0.19-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-suhosin to version 0.9.29-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/server/apache-22 to version 2.2.27-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-xdebug to version 2.0.5-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-xdebug to version 2.2.0-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-mysql to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53 to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/server/apache-22/module/apache-php53 to version 5.3.28-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-pear to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-apc to version 3.1.9-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-memcache to version 3.0.6-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52 to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-idn to version 0.2.0-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-52/extension/php-mysql to version 5.2.17-0.175.1.19.0.4.0 on Solaris 11.1Upgrade web/php-53/extension/php-idn to version 0.2.0-0.175.1.19.0.4.0 on Solaris 11.1 | May 29, 2017 | Jul 30, 2009 |
| Oracle_linux | — | Upgrade nsprUpgrade nss-pkcs11-develUpgrade nspr-develUpgrade nss-toolsUpgrade nssUpgrade nss-devel | Oct 16, 2024 | Jul 30, 2009 |
| Suse | — | Upgrade libfreebl3-x86Upgrade mozilla-nss-toolsUpgrade libneon27-x86Upgrade muttUpgrade neonUpgrade libldap-2_4-2-32bitUpgrade zlib-x86Upgrade zlibUpgrade mozilla-nssUpgrade zlib-32bitUpgrade openldap2-back-metaUpgrade mozilla-nspr-x86Upgrade openldap2Upgrade mozilla-nss-32bitUpgrade mozilla-nsprUpgrade openldap2-clientUpgrade mozilla-nspr-32bitUpgrade libfreebl3-32bitUpgrade libneon27Upgrade libldap-2_4-2-x86Upgrade libfreebl3Upgrade mozilla-nss-x86Upgrade libldap-2_4-2Upgrade libneon27-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libnss3-1d | Nov 8, 2024 | Jul 30, 2009 |
| Vmsa 2010 0001 1 Update For Service Console Packages Nss And Nspr | — | Upgrade VMware ESX 4.0 to build number 219382 | Sep 2, 2010 | Jul 30, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub