The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Nov 9, 2009 |
| Apple Java | — | Upgrade to Apple Java version 1.6.0.22Upgrade to Apple Java version 1.5.0.26 | Jan 26, 2012 | Nov 9, 2009 |
| Apple Osx Openssl | — | Apply OS X security update 2010-001 | Dec 16, 2011 | Nov 9, 2009 |
| Centos_linux | — | Upgrade java-1.6.0-openjdk-javadocUpgrade gnutls-utilsUpgrade nssUpgrade opensslUpgrade mod_sslUpgrade httpd-develUpgrade openssl-develUpgrade httpdUpgrade gnutlsUpgrade java-1.6.0-openjdk-demoUpgrade httpd-manualUpgrade nss-develUpgrade java-1.6.0-openjdk-develUpgrade nss-toolsUpgrade httpd-suexecUpgrade nspr-develUpgrade java-1.6.0-openjdk-srcUpgrade nss-pkcs11-develUpgrade openssl097aUpgrade java-1.6.0-openjdkUpgrade nsprUpgrade openssl-perlUpgrade gnutls-devel | Dec 1, 2016 | Nov 9, 2009 |
| Debian | — | Upgrade poundUpgrade tomcat-nativeUpgrade lighttpdUpgrade nginxUpgrade nssUpgrade opensslUpgrade apache2 | Jul 30, 2024 | Nov 9, 2009 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 5, 2013 |
| Freebsd | — | Upgrade nssUpgrade linux-firefox-develUpgrade firefoxUpgrade thunderbirdUpgrade linux-f10-nssUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Mar 30, 2010 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade dev-libs/openssl.Upgrade www-client/icecat.Upgrade www-servers/nginx.Upgrade dev-java/sun-jre-bin.Upgrade www-client/firefox.Upgrade app-emulation/emul-linux-x86-java.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/gnutls.Upgrade www-client/mozilla-firefox.Upgrade net-ftp/proftpd.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade dev-java/icedtea-bin.Upgrade net-libs/xulrunner-bin.Upgrade net-misc/openvpn.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-java/sun-jdk.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Nov 9, 2009 |
| Hp Ilo | — | Upgrade HP iLO 3 to version 1.20Upgrade HP iLO 2 to version 2.06 | Aug 1, 2018 | Nov 9, 2009 |
| Hpsim | — | Upgrade to the latest version of HP Systems Insight Manager | Oct 13, 2015 | Nov 9, 2009 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Nov 9, 2009 |
| Hpux | — | Update openssl.OPENSSL-MAN to the latest versionUpdate hpuxwsAPACHE.PHP2 to the latest versionUpdate openssl.OPENSSL-DOC to the latest versionUpdate openssl.OPENSSL-MIS to the latest versionUpdate hpuxwsAPCH32.APACHE2 to the latest versionUpdate openssl.OPENSSL-LIB to the latest versionUpdate hpuxwsAPACHE.APACHE2 to the latest versionUpdate hpuxwsAPACHE.MOD_JK to the latest versionUpdate hpuxwsAPCH32.MOD_JK to the latest versionUpdate hpuxwsAPCH32.AUTH_LDAP2 to the latest versionUpdate hpuxwsAPACHE.APACHE to the latest versionUpdate hpuxwsAPCH32.AUTH_LDAP to the latest versionUpdate hpuxwsAPACHE.MOD_PERL2 to the latest versionUpdate openssl.OPENSSL-CER to the latest versionUpdate hpuxwsAPACHE.MOD_PERL to the latest versionUpdate openssl.OPENSSL-PRNG to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP2 to the latest versionUpdate hpuxwsAPACHE.PHP to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP to the latest versionUpdate hpuxwsAPCH32.MOD_PERL to the latest versionUpdate hpuxwsAPCH32.WEBPROXY to the latest versionUpdate hpuxwsAPCH32.PHP to the latest versionUpdate openssl.OPENSSL-CONF to the latest versionUpdate hpuxwsAPACHE.MOD_JK2 to the latest versionUpdate openssl.OPENSSL-PVT to the latest versionUpdate openssl.OPENSSL-INC to the latest versionUpdate hpuxwsAPCH32.PHP2 to the latest versionUpdate hpuxwsAPACHE.WEBPROXY to the latest versionUpdate hpuxwsAPCH32.MOD_JK2 to the latest versionUpdate openssl.OPENSSL-SRC to the latest versionUpdate hpuxwsAPCH32.APACHE to the latest versionUpdate openssl.OPENSSL-RUN to the latest versionUpdate hpuxwsAPCH32.MOD_PERL2 to the latest version | Aug 11, 2017 | Nov 9, 2009 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Sep 16, 2010 | Nov 9, 2009 |
| Ibm Aix | — | Apply the fix or workaround for ssl_advisory | Nov 30, 2017 | Nov 9, 2009 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 27, 2010 | Nov 9, 2009 |
| Mfsa2010 22 | — | Upgrade to Mozilla Firefox version 3.5.9Upgrade to Mozilla Firefox version 3.6.2 | Jun 14, 2012 | Nov 9, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.4 | Feb 3, 2012 | Nov 9, 2009 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.4 | Feb 22, 2012 | Nov 9, 2009 |
| Nginx | — | Upgrade to nginx version 0.7.64Upgrade to nginx version 0.8.23 | Jan 27, 2014 | Nov 9, 2009 |
| Oracle Missing Cpu Apr 2011 | — | Apply the April 2011 Critical Patch Update (CPU) for Oracle Database | Apr 25, 2011 | Nov 9, 2009 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Nov 9, 2009 |
| Oracle_linux | — | Upgrade nspr-develUpgrade java-1.6.0-openjdkUpgrade nsprUpgrade nssUpgrade openssl-perlUpgrade java-1.6.0-openjdk-develUpgrade nss-toolsUpgrade openssl097aUpgrade java-1.6.0-openjdk-srcUpgrade opensslUpgrade nss-pkcs11-develUpgrade java-1.6.0-openjdk-javadocUpgrade httpd-develUpgrade openssl-develUpgrade nss-develUpgrade mod_sslUpgrade gnutlsUpgrade httpdUpgrade java-1.6.0-openjdk-demoUpgrade gnutls-utilsUpgrade httpd-manualUpgrade gnutls-devel | May 13, 2016 | Nov 9, 2009 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 6.3R7Update Pulse Connect Secure to version 7.1R1Update Pulse Connect Secure to version 6.4R4.1Update Pulse Connect Secure to version 6.5R2 | Oct 28, 2020 | Nov 9, 2009 |
| Suse | — | Upgrade zlib-x86Upgrade apache2-develUpgrade libgnutls26Upgrade libfreebl3Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-develUpgrade MozillaFirefox-translations-commonUpgrade java-1_6_0-ibm-pluginUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner190Upgrade libopenssl0_9_8-x86Upgrade postgresql-libs-32bitUpgrade libopenssl0_9_8-hmac-32bitUpgrade mozilla-xulrunner190-32bitUpgrade java-1_4_2-ibmUpgrade MozillaFirefoxUpgrade libgnutls-extra-develUpgrade java-1_4_2-ibm-jdbcUpgrade java-1_6_0-ibm-alsaUpgrade java-1_4_2-ibm-pluginUpgrade libidlUpgrade apache2-utilsUpgrade mozilla-xulrunner191-32bitUpgrade zlib-32bitUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nsprUpgrade mozilla-xulrunner191-x86Upgrade MozillaThunderbirdUpgrade mozilla-nss-x86Upgrade libopenssl-develUpgrade mozilla-nspr-32bitUpgrade java-1_6_0-ibm-jdbcUpgrade apache2-manualUpgrade libopenssl0_9_8-32bitUpgrade orbit2Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-gnome-32bitUpgrade apache2-docUpgrade gnutlsUpgrade libgnutls26-32bitUpgrade libidl-32bitUpgrade mozilla-xulrunner190-translationsUpgrade zlibUpgrade libfreebl3-32bitUpgrade postgresql-contribUpgrade postgresql-libsUpgrade mozilla-xulrunner191-gnomevfsUpgrade postgresql-develUpgrade mozilla-xulrunner191Upgrade mozilla-nss-32bitUpgrade MozillaThunderbird-develUpgrade libfreebl3-x86Upgrade apache2Upgrade MozillaFirefox-branding-SLEDUpgrade libopenssl0_9_8Upgrade postgresql-serverUpgrade postgresqlUpgrade libgnutls-extra26Upgrade apache2-workerUpgrade opensslUpgrade MozillaThunderbird-translations-otherUpgrade apache2-example-pagesUpgrade libopenssl0_9_8-hmacUpgrade libgnutls26-x86Upgrade gconf2-x86Upgrade java-1_6_0-ibmUpgrade orbit2-32bitUpgrade libgnutls-develUpgrade java-1_6_0-ibm-fontsUpgrade postgresql-libs-x86Upgrade orbit2-x86Upgrade gconf2Upgrade MozillaFirefox-translations-otherUpgrade openssl-docUpgrade mozilla-nssUpgrade mozilla-nss-toolsUpgrade apache2-eventUpgrade MozillaThunderbird-translations-commonUpgrade apache2-preforkUpgrade libidl-x86Upgrade mozilla-xulrunner190-x86Upgrade postgresql-docsUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-x86Upgrade gconf2-32bitUpgrade mozilla-xulrunner192-translations-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade icedtea6-pluginUpgrade openjdk-6-jre-libUpgrade openjdk-6-jdkUpgrade libssl0.9.8Upgrade openjdk-6-jreUpgrade apache2-commonUpgrade openjdk-6-jre-headlessUpgrade apache2.2-commonUpgrade libnss3-1d | Nov 8, 2024 | Nov 9, 2009 |
| Vmsa 2010 0015 | — | Upgrade VMware ESX 4.1 to build number 320092Upgrade VMware ESX 4.0 to build number 294855 | Nov 19, 2010 | Nov 9, 2009 |
| Vmsa 2010 0019 | — | Upgrade VMware ESX 3.5 to build number 317866 | Dec 17, 2012 | Nov 9, 2009 |
| Vmsa 2011 0003 | — | Upgrade VMware ESX 4.1 to build number 348481Upgrade VMware ESX 4.0 to build number 360236 | Dec 17, 2012 | Nov 9, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub