Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions via a crafted certificate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Network Security Services ‘CERT_VerifyCert’函数权限许可和访问控制漏洞
Vulnerability Description
Mozilla Network Security Services（NSS）是美国Mozilla基金会开发的一个函数库（网络安全服务库），它可跨平台提供SSL、S/MIME和其他Internet安全标准支持。 Mozilla NSS 3.15.3之前的3.15版本中的lib/certhigh/certvfy.c文件中的‘CERT_VerifyCert’函数中存在安全漏洞，该漏洞源于当‘CERTVerifyLog’参数有效时，程序对不兼容的密钥用法证书提供返回值。远程攻击者可通过提供特制的证书利用该漏洞绕过
CVSS Information
N/A
Vulnerability Type
N/A