NetSight
IP …
high7.5

CVE-2004-0826

Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length f…

Impact

Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.

Affected products

VendorProductAffected versions
MozillaNetwork Security Services
Versions 3.2, 3.2.1, 3.3, 3.3.1, 3.3.2, 3.4
NetscapeCertificate Server
Versions 1.0, 4.2
NetscapeDirectory Server
Versions 1.3, 3.1, 3.12, 4.1, 4.11, 4.13
NetscapeEnterprise Server
Versions 2.0, 2.0.1c, 2.0a, 3.0, 3.0.1, 3.0.1b
NetscapePersonalization Engine
All versions
SunJava Enterprise System
Versions 2003q4, 2004q2
SunJava System Application Server
Versions 7.0, 7.1
SunOne Application Server
Version 6.0
SunOne Web Server
Versions 4.1, 6.0, 6.1
HpHp-Ux
Versions 11.00, 11.11, 11.23

References