CVE ID:	CVE-2014-1490
Description:	Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement of a session ticket.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2014.0248.1   1.3.6.1.4.1.25623.1.1.4.2014.0248.2
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1490 BugTraq ID: 65335 http://www.securityfocus.com/bid/65335 Bugtraq: 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/534161/100/0/threaded Debian Security Information: DSA-2858 (Google Search) http://www.debian.org/security/2014/dsa-2858 http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html http://seclists.org/fulldisclosure/2014/Dec/23 https://security.gentoo.org/glsa/201504-01 http://osvdb.org/102876 http://www.securitytracker.com/id/1029717 http://www.securitytracker.com/id/1029720 http://www.securitytracker.com/id/1029721 http://secunia.com/advisories/56706 http://secunia.com/advisories/56767 http://secunia.com/advisories/56787 http://secunia.com/advisories/56858 http://secunia.com/advisories/56888 http://secunia.com/advisories/56922 SuSE Security Announcement: SUSE-SU-2014:0248 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html SuSE Security Announcement: openSUSE-SU-2014:0212 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html SuSE Security Announcement: openSUSE-SU-2014:0213 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html SuSE Security Announcement: openSUSE-SU-2014:0419 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html http://www.ubuntu.com/usn/USN-2102-1 http://www.ubuntu.com/usn/USN-2102-2 http://www.ubuntu.com/usn/USN-2119-1 XForce ISS Database: mozilla-nss-cve20141490-code-exec(90885) https://exchange.xforce.ibmcloud.com/vulnerabilities/90885