CVE:CVE-2013-1620
CNNVD:CNNVD-201302-153
Mozilla Network Security Services（NSS）是美国Mozilla基金会开发的一个函数库（网络安全服务库），它可跨平台提供SSL、S/MIME和其他Internet安全标准支持。
Mozilla Network Security Services (NSS)中的TLS实现中存在漏洞，该漏洞源于程序在处理畸形的CBC填充期间没有正确地研究针对固执的MAC地址检查操作所进行的计时边信道攻击。通过对特制报文的计时数据的统计分析，远程攻击者可利用该漏洞实施区分攻击以及明文恢复攻击。
solution:Upgrade mozilla network_security_services to a higher version than 3.14.3,and avoid the version (,3.14.3); Upgrade canonical ubuntu_linux to a higher version than 10.04,11.10,12.04,12.10,and avoid the version 10.04,11.10,12.04,12.10; Upgrade oracle enterprise_manager_ops_center to a higher version than 11.1,12.1,12.2,and avoid the version 11.1,12.1,12.2; Upgrade oracle glassfish_communications_server to a higher version than 2.0,and avoid the version 2.0; Upgrade oracle glassfish_server to a higher version than 2.1.1,and avoid the version 2.1.1; Upgrade oracle iplanet_web_proxy_server to a higher version than 4.0,and avoid the version 4.0; Upgrade oracle iplanet_web_server to a higher version than 6.1,7.0,and avoid the version 6.1,7.0; Upgrade oracle opensso to a higher version than 3.0-03,and avoid the version 3.0-03; Upgrade oracle traffic_director to a higher version than 11.1.1.6.0,11.1.1.7.0,and avoid the version 11.1.1.6.0,11.1.1.7.0; Upgrade oracle vm_server to a higher version than 3.2,and avoid the version 3.2; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_eus to a higher version than 5.9,and avoid the version 5.9; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 5.9,and avoid the version 5.9; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,and avoid the version 5.0,6.0