The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Nov 9, 2009 |
| Apple Java | — | Upgrade to Apple Java version 1.6.0.22Upgrade to Apple Java version 1.5.0.26 | Jan 26, 2012 | Nov 9, 2009 |
| Apple Osx Openssl | — | Apply OS X security update 2010-001 | Dec 16, 2011 | Nov 9, 2009 |
| Centos_linux | — | Upgrade mod_sslUpgrade opensslUpgrade openssl-develUpgrade nssUpgrade java-1.6.0-openjdk-javadocUpgrade gnutlsUpgrade httpd-develUpgrade httpdUpgrade httpd-manualUpgrade java-1.6.0-openjdk-demoUpgrade gnutls-utilsUpgrade nss-develUpgrade nsprUpgrade nss-toolsUpgrade gnutls-develUpgrade nspr-develUpgrade nss-pkcs11-develUpgrade java-1.6.0-openjdk-develUpgrade httpd-suexecUpgrade java-1.6.0-openjdkUpgrade openssl097aUpgrade java-1.6.0-openjdk-srcUpgrade openssl-perl | Dec 1, 2016 | Nov 9, 2009 |
| Debian | — | Upgrade lighttpdUpgrade nssUpgrade poundUpgrade tomcat-nativeUpgrade nginxUpgrade apache2Upgrade openssl | Jul 30, 2024 | Nov 9, 2009 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 5, 2013 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-f10-nssUpgrade linux-firefoxUpgrade firefoxUpgrade thunderbirdUpgrade nssUpgrade linux-firefox-devel | Dec 10, 2025 | Mar 30, 2010 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade net-ftp/proftpd.Upgrade dev-java/sun-jre-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/gnutls.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade dev-libs/openssl.Upgrade www-client/firefox.Upgrade www-servers/nginx.Upgrade app-emulation/emul-linux-x86-java.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-java/icedtea-bin.Upgrade net-misc/openvpn.Upgrade dev-java/sun-jdk.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Nov 9, 2009 |
| Hp Ilo | — | Upgrade HP iLO 2 to version 2.06Upgrade HP iLO 3 to version 1.20 | Aug 1, 2018 | Nov 9, 2009 |
| Hpsim | — | Upgrade to the latest version of HP Systems Insight Manager | Oct 13, 2015 | Nov 9, 2009 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Nov 9, 2009 |
| Hpux | — | Update hpuxwsAPACHE.AUTH_LDAP2 to the latest versionUpdate hpuxwsAPCH32.APACHE2 to the latest versionUpdate hpuxwsAPCH32.AUTH_LDAP2 to the latest versionUpdate openssl.OPENSSL-MAN to the latest versionUpdate openssl.OPENSSL-LIB to the latest versionUpdate hpuxwsAPACHE.PHP2 to the latest versionUpdate hpuxwsAPACHE.MOD_PERL to the latest versionUpdate openssl.OPENSSL-PRNG to the latest versionUpdate openssl.OPENSSL-DOC to the latest versionUpdate hpuxwsAPCH32.MOD_JK to the latest versionUpdate openssl.OPENSSL-CER to the latest versionUpdate hpuxwsAPACHE.PHP to the latest versionUpdate hpuxwsAPACHE.APACHE2 to the latest versionUpdate hpuxwsAPACHE.MOD_PERL2 to the latest versionUpdate hpuxwsAPACHE.APACHE to the latest versionUpdate hpuxwsAPACHE.MOD_JK to the latest versionUpdate hpuxwsAPCH32.AUTH_LDAP to the latest versionUpdate openssl.OPENSSL-MIS to the latest versionUpdate openssl.OPENSSL-PVT to the latest versionUpdate hpuxwsAPCH32.MOD_PERL to the latest versionUpdate openssl.OPENSSL-SRC to the latest versionUpdate hpuxwsAPCH32.MOD_PERL2 to the latest versionUpdate hpuxwsAPACHE.WEBPROXY to the latest versionUpdate openssl.OPENSSL-CONF to the latest versionUpdate hpuxwsAPCH32.PHP to the latest versionUpdate hpuxwsAPCH32.MOD_JK2 to the latest versionUpdate hpuxwsAPCH32.WEBPROXY to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP to the latest versionUpdate hpuxwsAPCH32.PHP2 to the latest versionUpdate hpuxwsAPACHE.MOD_JK2 to the latest versionUpdate hpuxwsAPCH32.APACHE to the latest versionUpdate openssl.OPENSSL-INC to the latest versionUpdate openssl.OPENSSL-RUN to the latest version | Aug 11, 2017 | Nov 9, 2009 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Sep 16, 2010 | Nov 9, 2009 |
| Ibm Aix | — | Apply the fix or workaround for ssl_advisory | Nov 30, 2017 | Nov 9, 2009 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 27, 2010 | Nov 9, 2009 |
| Mfsa2010 22 | — | Upgrade to Mozilla Firefox version 3.5.9Upgrade to Mozilla Firefox version 3.6.2 | Jun 14, 2012 | Nov 9, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.4 | Feb 3, 2012 | Nov 9, 2009 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.4 | Feb 22, 2012 | Nov 9, 2009 |
| Nginx | — | Upgrade to nginx version 0.8.23Upgrade to nginx version 0.7.64 | Jan 27, 2014 | Nov 9, 2009 |
| Oracle Missing Cpu Apr 2011 | — | Apply the April 2011 Critical Patch Update (CPU) for Oracle Database | Apr 25, 2011 | Nov 9, 2009 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Nov 9, 2009 |
| Oracle_linux | — | Upgrade gnutlsUpgrade httpdUpgrade mod_sslUpgrade gnutls-develUpgrade openssl-develUpgrade java-1.6.0-openjdk-demoUpgrade httpd-develUpgrade nss-develUpgrade java-1.6.0-openjdk-javadocUpgrade httpd-manualUpgrade nss-pkcs11-develUpgrade gnutls-utilsUpgrade openssl-perlUpgrade nssUpgrade java-1.6.0-openjdk-srcUpgrade nspr-develUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade nsprUpgrade openssl097aUpgrade opensslUpgrade nss-tools | May 13, 2016 | Nov 9, 2009 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 7.1R1Update Pulse Connect Secure to version 6.4R4.1Update Pulse Connect Secure to version 6.5R2Update Pulse Connect Secure to version 6.3R7 | Oct 28, 2020 | Nov 9, 2009 |
| Suse | — | Upgrade libfreebl3Upgrade mozilla-xulrunner191-32bitUpgrade apache2-manualUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-32bitUpgrade java-1_6_0-ibm-jdbcUpgrade orbit2Upgrade MozillaFirefox-translations-commonUpgrade apache2-docUpgrade zlibUpgrade zlib-x86Upgrade libopenssl0_9_8-x86Upgrade mozilla-xulrunner192Upgrade libgnutls26-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefoxUpgrade libgnutls-extra-develUpgrade apache2-develUpgrade postgresql-libs-32bitUpgrade libidlUpgrade libopenssl0_9_8-hmac-32bitUpgrade mozilla-xulrunner190-32bitUpgrade libidl-32bitUpgrade java-1_4_2-ibm-pluginUpgrade java-1_6_0-ibm-pluginUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192-gnomeUpgrade libgnutls26Upgrade MozillaFirefox-translationsUpgrade zlib-32bitUpgrade mozilla-nss-x86Upgrade java-1_4_2-ibm-jdbcUpgrade java-1_4_2-ibmUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-develUpgrade MozillaFirefox-develUpgrade MozillaThunderbirdUpgrade libopenssl-develUpgrade apache2-utilsUpgrade java-1_6_0-ibm-alsaUpgrade gnutlsUpgrade libopenssl0_9_8-32bitUpgrade apache2-workerUpgrade mozilla-nssUpgrade opensslUpgrade java-1_6_0-ibmUpgrade postgresql-contribUpgrade MozillaFirefox-branding-SLEDUpgrade openssl-docUpgrade MozillaThunderbird-develUpgrade apache2-eventUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190-x86Upgrade libidl-x86Upgrade java-1_6_0-ibm-fontsUpgrade mozilla-xulrunner192-translations-32bitUpgrade postgresql-docsUpgrade apache2-preforkUpgrade MozillaThunderbird-translations-commonUpgrade postgresql-serverUpgrade libgnutls-extra26Upgrade libopenssl0_9_8-hmacUpgrade gconf2Upgrade mozilla-xulrunner191Upgrade gconf2-32bitUpgrade libgnutls26-x86Upgrade libfreebl3-x86Upgrade mozilla-nss-32bitUpgrade orbit2-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade postgresql-develUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-x86Upgrade orbit2-32bitUpgrade libgnutls-develUpgrade libopenssl0_9_8Upgrade postgresqlUpgrade MozillaFirefox-translations-otherUpgrade postgresql-libs-x86Upgrade MozillaThunderbird-translations-otherUpgrade libfreebl3-32bitUpgrade gconf2-x86Upgrade apache2-example-pagesUpgrade postgresql-libsUpgrade mozilla-nss-toolsUpgrade apache2 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade openjdk-6-jdkUpgrade icedtea6-pluginUpgrade apache2-commonUpgrade libssl0.9.8Upgrade openjdk-6-jreUpgrade openjdk-6-jre-libUpgrade apache2.2-commonUpgrade openjdk-6-jre-headlessUpgrade libnss3-1d | Nov 8, 2024 | Nov 9, 2009 |
| Vmsa 2010 0015 | — | Upgrade VMware ESX 4.1 to build number 320092Upgrade VMware ESX 4.0 to build number 294855 | Nov 19, 2010 | Nov 9, 2009 |
| Vmsa 2010 0019 | — | Upgrade VMware ESX 3.5 to build number 317866 | Dec 17, 2012 | Nov 9, 2009 |
| Vmsa 2011 0003 | — | Upgrade VMware ESX 4.0 to build number 360236Upgrade VMware ESX 4.1 to build number 348481 | Dec 17, 2012 | Nov 9, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub