CVE-2004-0826

Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Affected products

• Hp-ux (Hp)
• Network Security Services (Mozilla)
• Certificate Server (Netscape)
• Directory Server (Netscape)
• Enterprise Server (Netscape)
• Personalization Engine (Netscape)
• Java Enterprise System (Sun)
• Java System Application Server (Sun)
• One Application Server (Sun)
• One Web Server (Sun)

References

• http://marc.info/?l=bugtraq&m=109351293827731&w=2
• http://www.securityfocus.com/bid/11015
• http://xforce.iss.net/xforce/alerts/id/180
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16314