The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) prior to 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle malicious users to spoof SSL servers via a crafted certificate.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mozilla network security services 3.15.3.1 |
||
mozilla network security services 3.12 |
||
mozilla network security services 3.12.1 |
||
mozilla network security services 3.12.4 |
||
mozilla network security services 3.12.5 |
||
mozilla network security services 3.14.3 |
||
mozilla network security services 3.14.4 |
||
mozilla network security services 3.2.1 |
||
mozilla network security services 3.3 |
||
mozilla network security services 3.6 |
||
mozilla network security services 3.6.1 |
||
mozilla network security services 3.7 |
||
mozilla network security services 3.11.4 |
||
mozilla network security services 3.11.5 |
||
mozilla network security services 3.12.3.1 |
||
mozilla network security services 3.9 |
||
mozilla network security services 3.12.3.2 |
||
mozilla network security services 3.14.1 |
||
mozilla network security services 3.14.2 |
||
mozilla network security services 3.15.3 |
||
mozilla network security services 3.2 |
||
mozilla network security services 3.4.2 |
||
mozilla network security services 3.5 |
||
mozilla network security services 3.7.7 |
||
mozilla network security services 3.8 |
||
mozilla network security services |
||
mozilla network security services 3.15.4 |
||
mozilla network security services 3.12.10 |
||
mozilla network security services 3.12.11 |
||
mozilla network security services 3.12.6 |
||
mozilla network security services 3.12.7 |
||
mozilla network security services 3.12.8 |
||
mozilla network security services 3.14.5 |
||
mozilla network security services 3.15 |
||
mozilla network security services 3.3.1 |
||
mozilla network security services 3.3.2 |
||
mozilla network security services 3.7.1 |
||
mozilla network security services 3.7.2 |
||
mozilla network security services 3.11.2 |
||
mozilla network security services 3.11.3 |
||
mozilla network security services 3.12.2 |
||
mozilla network security services 3.12.3 |
||
mozilla network security services 3.12.9 |
||
mozilla network security services 3.14 |
||
mozilla network security services 3.15.1 |
||
mozilla network security services 3.15.2 |
||
mozilla network security services 3.4 |
||
mozilla network security services 3.4.1 |
||
mozilla network security services 3.7.3 |
||
mozilla network security services 3.7.5 |
Vulmon