SeaMonkey < 2.3.3 Untrusted CA

medium Nessus Plugin ID 56123

Language:

Synopsis

The remote Windows host contains a web browser that contains support for an untrustworthy certificate authority.

Description

The installed version of SeaMonkey is earlier than 2.3.3. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of SeaMonkey.

Note this is a further fix to MFSA 2011-34, which removed the DigiNotar root certificate.

Solution

Upgrade to SeaMonkey 2.3.3 or later.

Plugin Details

Severity: Medium

ID: 56123

File Name: seamonkey_233.nasl

Version: Revision: 1.4

Type: local

Agent: windows

Family: Windows

Published: 9/8/2011

Updated: 6/12/2017

Supported Sensors: Nessus Agent, Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 5.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Information

CPE: cpe:/a:mozilla:seamonkey

Required KB Items: SeaMonkey/Version

Patch Publication Date: 9/6/2011

Vulnerability Publication Date: 9/6/2011

Detections

Analytics