CVE-2004-0826

high · 7.5

Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.

7.5

CVSS

22.5%

EPSS (exploit prob.)

98th

EPSS percentile

2004-12-31

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
mozilla	network_security_services	3.2
mozilla	network_security_services	3.2.1
mozilla	network_security_services	3.3
mozilla	network_security_services	3.3.1
mozilla	network_security_services	3.3.2
mozilla	network_security_services	3.4
mozilla	network_security_services	3.4.1
mozilla	network_security_services	3.4.2
mozilla	network_security_services	3.5
mozilla	network_security_services	3.6
mozilla	network_security_services	3.6.1
mozilla	network_security_services	3.7
mozilla	network_security_services	3.7.1
mozilla	network_security_services	3.7.2
mozilla	network_security_services	3.7.3
mozilla	network_security_services	3.7.5
mozilla	network_security_services	3.7.7
mozilla	network_security_services	3.8
mozilla	network_security_services	3.9
netscape	certificate_server	1.0
netscape	certificate_server	4.2
netscape	directory_server	1.3
netscape	directory_server	3.1
netscape	directory_server	3.12
netscape	directory_server	4.1
netscape	directory_server	4.11
netscape	directory_server	4.13
netscape	enterprise_server	2.0
netscape	enterprise_server	2.0.1c
netscape	enterprise_server	2.0a
netscape	enterprise_server	3.0
netscape	enterprise_server	3.0.1
netscape	enterprise_server	3.0.1b
netscape	enterprise_server	3.0.7a
netscape	enterprise_server	3.0l
netscape	enterprise_server	3.1
netscape	enterprise_server	3.2
netscape	enterprise_server	3.3
netscape	enterprise_server	3.4
netscape	enterprise_server	3.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-0826