Test ID:	1.3.6.1.4.1.25623.1.2.1.2015.64
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2015-64) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: ECDSA signature validation fails to handle some signatures correctly Mozilla community member Watson Ladd reported that the implementation of Elliptical Curve Cryptography (ECC) multiplication for Elliptic Curve Digital Signature Algorithm (ECDSA) signature validation in Network Security Services (NSS) did not handle exceptional cases correctly. This could potentially allow for signature forgery. This issue was fixed in NSS version 3.19.1. Affected Software/OS: Firefox version(s) below 39. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2730 BugTraq ID: 75541 http://www.securityfocus.com/bid/75541 BugTraq ID: 83399 http://www.securityfocus.com/bid/83399 Debian Security Information: DSA-3336 (Google Search) http://www.debian.org/security/2015/dsa-3336 https://security.gentoo.org/glsa/201512-10 RedHat Security Advisories: RHSA-2015:1664 http://rhn.redhat.com/errata/RHSA-2015-1664.html RedHat Security Advisories: RHSA-2015:1699 http://rhn.redhat.com/errata/RHSA-2015-1699.html http://www.securitytracker.com/id/1032783 SuSE Security Announcement: SUSE-SU-2015:1268 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html SuSE Security Announcement: SUSE-SU-2015:1269 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html SuSE Security Announcement: SUSE-SU-2015:1449 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html SuSE Security Announcement: openSUSE-SU-2015:1229 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html SuSE Security Announcement: openSUSE-SU-2015:1266 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html http://www.ubuntu.com/usn/USN-2656-1 http://www.ubuntu.com/usn/USN-2656-2 http://www.ubuntu.com/usn/USN-2672-1
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.