The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Nov 9, 2009 |
| Apple Java | — | Upgrade to Apple Java version 1.6.0.22Upgrade to Apple Java version 1.5.0.26 | Jan 26, 2012 | Nov 9, 2009 |
| Apple Osx Openssl | — | Apply OS X security update 2010-001 | Dec 16, 2011 | Nov 9, 2009 |
| Centos_linux | — | Upgrade java-1.6.0-openjdk-javadocUpgrade nss-develUpgrade httpd-manualUpgrade httpdUpgrade openssl-develUpgrade nssUpgrade gnutlsUpgrade opensslUpgrade gnutls-utilsUpgrade mod_sslUpgrade java-1.6.0-openjdk-demoUpgrade httpd-develUpgrade java-1.6.0-openjdk-develUpgrade nspr-develUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-srcUpgrade nss-pkcs11-develUpgrade gnutls-develUpgrade openssl-perlUpgrade nsprUpgrade httpd-suexecUpgrade nss-toolsUpgrade openssl097a | Dec 1, 2016 | Nov 9, 2009 |
| Debian | — | Upgrade tomcat-nativeUpgrade lighttpdUpgrade nssUpgrade nginxUpgrade poundUpgrade apache2Upgrade openssl | Jul 30, 2024 | Nov 9, 2009 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 5, 2013 |
| Freebsd | — | Upgrade nssUpgrade firefoxUpgrade thunderbirdUpgrade linux-firefox-develUpgrade seamonkeyUpgrade linux-f10-nssUpgrade linux-firefox | Dec 10, 2025 | Mar 30, 2010 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade dev-java/icedtea-bin.Upgrade net-misc/openvpn.Upgrade dev-java/sun-jdk.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-ftp/proftpd.Upgrade dev-libs/openssl.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade app-emulation/emul-linux-x86-java.Upgrade www-servers/nginx.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade net-libs/gnutls.Upgrade www-client/icecat.Upgrade dev-java/sun-jre-bin. | Oct 30, 2017 | Nov 9, 2009 |
| Hp Ilo | — | Upgrade HP iLO 3 to version 1.20Upgrade HP iLO 2 to version 2.06 | Aug 1, 2018 | Nov 9, 2009 |
| Hpsim | — | Upgrade to the latest version of HP Systems Insight Manager | Oct 13, 2015 | Nov 9, 2009 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Nov 9, 2009 |
| Hpux | — | Update openssl.OPENSSL-DOC to the latest versionUpdate hpuxwsAPCH32.MOD_JK to the latest versionUpdate openssl.OPENSSL-PRNG to the latest versionUpdate openssl.OPENSSL-MAN to the latest versionUpdate openssl.OPENSSL-LIB to the latest versionUpdate hpuxwsAPACHE.MOD_PERL to the latest versionUpdate openssl.OPENSSL-CER to the latest versionUpdate openssl.OPENSSL-MIS to the latest versionUpdate hpuxwsAPACHE.APACHE2 to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP2 to the latest versionUpdate hpuxwsAPCH32.AUTH_LDAP to the latest versionUpdate hpuxwsAPACHE.MOD_JK to the latest versionUpdate hpuxwsAPACHE.APACHE to the latest versionUpdate hpuxwsAPACHE.MOD_PERL2 to the latest versionUpdate hpuxwsAPACHE.PHP2 to the latest versionUpdate hpuxwsAPACHE.PHP to the latest versionUpdate hpuxwsAPCH32.APACHE2 to the latest versionUpdate hpuxwsAPCH32.AUTH_LDAP2 to the latest versionUpdate hpuxwsAPCH32.MOD_PERL2 to the latest versionUpdate hpuxwsAPCH32.PHP to the latest versionUpdate hpuxwsAPCH32.PHP2 to the latest versionUpdate openssl.OPENSSL-INC to the latest versionUpdate openssl.OPENSSL-CONF to the latest versionUpdate openssl.OPENSSL-SRC to the latest versionUpdate openssl.OPENSSL-PVT to the latest versionUpdate hpuxwsAPACHE.WEBPROXY to the latest versionUpdate hpuxwsAPCH32.MOD_JK2 to the latest versionUpdate hpuxwsAPCH32.WEBPROXY to the latest versionUpdate hpuxwsAPCH32.APACHE to the latest versionUpdate hpuxwsAPACHE.MOD_JK2 to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP to the latest versionUpdate hpuxwsAPCH32.MOD_PERL to the latest versionUpdate openssl.OPENSSL-RUN to the latest version | Aug 11, 2017 | Nov 9, 2009 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Sep 16, 2010 | Nov 9, 2009 |
| Ibm Aix | — | Apply the fix or workaround for ssl_advisory | Nov 30, 2017 | Nov 9, 2009 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 27, 2010 | Nov 9, 2009 |
| Mfsa2010 22 | — | Upgrade to Mozilla Firefox version 3.5.9Upgrade to Mozilla Firefox version 3.6.2 | Jun 14, 2012 | Nov 9, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.4 | Feb 3, 2012 | Nov 9, 2009 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.4 | Feb 22, 2012 | Nov 9, 2009 |
| Nginx | — | Upgrade to nginx version 0.8.23Upgrade to nginx version 0.7.64 | Jan 27, 2014 | Nov 9, 2009 |
| Oracle Missing Cpu Apr 2011 | — | Apply the April 2011 Critical Patch Update (CPU) for Oracle Database | Apr 25, 2011 | Nov 9, 2009 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Nov 9, 2009 |
| Oracle_linux | — | Upgrade gnutls-develUpgrade openssl-develUpgrade nss-pkcs11-develUpgrade nss-develUpgrade java-1.6.0-openjdk-javadocUpgrade httpd-develUpgrade java-1.6.0-openjdk-demoUpgrade httpdUpgrade httpd-manualUpgrade gnutls-utilsUpgrade gnutlsUpgrade mod_sslUpgrade openssl-perlUpgrade java-1.6.0-openjdkUpgrade nssUpgrade nss-toolsUpgrade opensslUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-develUpgrade nsprUpgrade nspr-develUpgrade openssl097a | May 13, 2016 | Nov 9, 2009 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 6.3R7Update Pulse Connect Secure to version 6.4R4.1Update Pulse Connect Secure to version 6.5R2Update Pulse Connect Secure to version 7.1R1 | Oct 28, 2020 | Nov 9, 2009 |
| Suse | — | Upgrade apache2-preforkUpgrade postgresqlUpgrade libgnutls26-x86Upgrade mozilla-nssUpgrade libfreebl3-x86Upgrade gconf2-32bitUpgrade MozillaThunderbird-translations-commonUpgrade postgresql-libs-x86Upgrade mozilla-xulrunner190-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner191-translationsUpgrade libidl-x86Upgrade openssl-docUpgrade libopenssl0_9_8Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner192-translations-32bitUpgrade java-1_6_0-ibm-fontsUpgrade postgresql-docsUpgrade apache2Upgrade apache2-workerUpgrade orbit2-x86Upgrade gconf2Upgrade orbit2-32bitUpgrade postgresql-develUpgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-translations-otherUpgrade postgresql-libsUpgrade apache2-example-pagesUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner191Upgrade mozilla-nss-toolsUpgrade java-1_6_0-ibmUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaThunderbird-translations-otherUpgrade postgresql-serverUpgrade libgnutls-develUpgrade libgnutls-extra26Upgrade postgresql-contribUpgrade gconf2-x86Upgrade mozilla-nss-32bitUpgrade apache2-eventUpgrade libopenssl0_9_8-hmacUpgrade opensslUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner191-32bitUpgrade libgnutls-extra-develUpgrade MozillaThunderbirdUpgrade orbit2Upgrade apache2-develUpgrade java-1_4_2-ibm-jdbcUpgrade apache2-utilsUpgrade mozilla-xulrunner191-x86Upgrade libfreebl3Upgrade java-1_6_0-ibm-jdbcUpgrade java-1_4_2-ibm-pluginUpgrade mozilla-nss-x86Upgrade java-1_6_0-ibm-pluginUpgrade libopenssl0_9_8-32bitUpgrade MozillaFirefox-translationsUpgrade libopenssl-develUpgrade java-1_4_2-ibmUpgrade zlib-32bitUpgrade mozilla-xulrunner192Upgrade libgnutls26Upgrade mozilla-nsprUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-translations-commonUpgrade zlibUpgrade postgresql-libs-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-32bitUpgrade libidl-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-nspr-x86Upgrade MozillaFirefox-develUpgrade libopenssl0_9_8-hmac-32bitUpgrade libidlUpgrade apache2-manualUpgrade libgnutls26-32bitUpgrade libopenssl0_9_8-x86Upgrade apache2-docUpgrade mozilla-xulrunner190Upgrade MozillaFirefoxUpgrade zlib-x86Upgrade java-1_6_0-ibm-alsaUpgrade mozilla-xulrunner192-develUpgrade gnutls | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libssl0.9.8Upgrade icedtea6-pluginUpgrade openjdk-6-jdkUpgrade apache2-commonUpgrade openjdk-6-jreUpgrade openjdk-6-jre-libUpgrade apache2.2-commonUpgrade openjdk-6-jre-headlessUpgrade libnss3-1d | Nov 8, 2024 | Nov 9, 2009 |
| Vmsa 2010 0015 | — | Upgrade VMware ESX 4.1 to build number 320092Upgrade VMware ESX 4.0 to build number 294855 | Nov 19, 2010 | Nov 9, 2009 |
| Vmsa 2010 0019 | — | Upgrade VMware ESX 3.5 to build number 317866 | Dec 17, 2012 | Nov 9, 2009 |
| Vmsa 2011 0003 | — | Upgrade VMware ESX 4.0 to build number 360236Upgrade VMware ESX 4.1 to build number 348481 | Dec 17, 2012 | Nov 9, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub