CVE-2004-0826: HP HP-Ux

High severity, CVSS 7.5. EPSS: 22.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.

Affected products

• HP HP-Ux: version 11.00 only; version 11.11 only; version 11.23 only
• Mozilla Network Security Services: version 3.2 only; version 3.2.1 only; version 3.3 only; version 3.3.1 only; version 3.3.2 only; version 3.4 only; …
• Netscape Certificate Server: version 1.0 only; version 4.2 only
• Netscape Directory Server: version 1.3 only; version 3.1 only; version 3.12 only; version 4.1 only; version 4.11 only; version 4.13 only
• Netscape Enterprise Server: version 2.0 only; version 2.0.1c only; version 2.0a only; version 3.0 only; version 3.0.1 only; version 3.0.1b only; …
• Netscape Personalization Engine: any version
• Sun Java Enterprise System: version 2003q4 only; version 2004q2 only
• Sun Java System Application Server: version 7.0 only; version 7.1 only
• Sun One Application Server: version 6.0 only
• Sun One Web Server: version 4.1 only; version 6.0 only; version 6.1 only

Published 2004-12-31. Last modified 2026-06-16.