Oval Definition:oval:com.ubuntu.precise:def:20141491000
Revision Date:2014-02-06Version:1
Title:CVE-2014-1491 on Ubuntu 12.04 LTS (precise) - medium.
Description:Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-1491
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND Package Information
  • The 'firefox' package in precise was vulnerable but has been fixed (note: '27.0+build1-0ubuntu0.12.04.1').
  • OR NOT While related to the CVE in some way, the 'nss' package in precise is not affected.
  • OR The 'thunderbird' package in precise was vulnerable but has been fixed (note: '1:24.3.0+build2-0ubuntu0.12.04.1').
  • BACK