ID de Prueba:	1.3.6.1.4.1.25623.1.0.62527
Categoría:	CentOS Local Security Checks
Título:	CentOS Security Advisory CESA-2006:0330 (thunderbird)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates to thunderbird announced in advisory CESA-2006:0330. For details on the issues addressed in this update, please visit the referenced security advisories. Solution: Update the appropriate packages on your system. http://www.securityspace.com/smysecure/catid.html?in=CESA-2006:0330 http://www.securityspace.com/smysecure/catid.html?in=RHSA-2006:0330 https://rhn.redhat.com/errata/RHSA-2006-0330.html Risk factor : Critical CVSS Score: 10.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-0292 BugTraq ID: 16476 http://www.securityfocus.com/bid/16476 Debian Security Information: DSA-1044 (Google Search) http://www.debian.org/security/2006/dsa-1044 Debian Security Information: DSA-1046 (Google Search) http://www.debian.org/security/2006/dsa-1046 Debian Security Information: DSA-1051 (Google Search) http://www.debian.org/security/2006/dsa-1051 http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html http://www.securityfocus.com/archive/1/425978/100/0/threaded http://www.securityfocus.com/archive/1/425975/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml HPdes Security Advisory: HPSBUX02122 http://www.securityfocus.com/archive/1/438730/100/0/threaded HPdes Security Advisory: HPSBUX02156 http://www.securityfocus.com/archive/1/446657/100/200/threaded HPdes Security Advisory: SSRT061158 HPdes Security Advisory: SSRT061236 http://www.mandriva.com/security/advisories?name=MDKSA-2006:036 http://www.mandriva.com/security/advisories?name=MDKSA-2006:037 http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10016 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A670 http://www.redhat.com/support/errata/RHSA-2006-0199.html http://www.redhat.com/support/errata/RHSA-2006-0200.html http://www.redhat.com/support/errata/RHSA-2006-0330.html SCO Security Bulletin: SCOSA-2006.26 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt http://securitytracker.com/id?1015570 http://secunia.com/advisories/18700 http://secunia.com/advisories/18703 http://secunia.com/advisories/18704 http://secunia.com/advisories/18705 http://secunia.com/advisories/18706 http://secunia.com/advisories/18708 http://secunia.com/advisories/18709 http://secunia.com/advisories/19230 http://secunia.com/advisories/19746 http://secunia.com/advisories/19759 http://secunia.com/advisories/19780 http://secunia.com/advisories/19821 http://secunia.com/advisories/19823 http://secunia.com/advisories/19852 http://secunia.com/advisories/19862 http://secunia.com/advisories/19863 http://secunia.com/advisories/19902 http://secunia.com/advisories/19941 http://secunia.com/advisories/19950 http://secunia.com/advisories/20051 http://secunia.com/advisories/21033 http://secunia.com/advisories/21622 http://secunia.com/advisories/22065 SGI Security Advisory: 20060201-01-U ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 SuSE Security Announcement: SUSE-SA:2006:022 (Google Search) http://www.novell.com/linux/security/advisories/2006_04_25.html https://usn.ubuntu.com/271-1/ https://usn.ubuntu.com/275-1/ https://usn.ubuntu.com/276-1/ http://www.vupen.com/english/advisories/2006/0413 http://www.vupen.com/english/advisories/2006/3391 http://www.vupen.com/english/advisories/2006/3749 XForce ISS Database: mozilla-javascript-memory-corruption(24430) https://exchange.xforce.ibmcloud.com/vulnerabilities/24430 Common Vulnerability Exposure (CVE) ID: CVE-2006-0296 Cert/CC Advisory: TA06-038A http://www.us-cert.gov/cas/techalerts/TA06-038A.html CERT/CC vulnerability note: VU#592425 http://www.kb.cert.org/vuls/id/592425 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11803 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1493 XForce ISS Database: mozilla-xuldocument-command-execution(24434) https://exchange.xforce.ibmcloud.com/vulnerabilities/24434 Common Vulnerability Exposure (CVE) ID: CVE-2006-0749 BugTraq ID: 17516 http://www.securityfocus.com/bid/17516 Bugtraq: 20060417 ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/431126/100/0/threaded Cert/CC Advisory: TA06-107A http://www.us-cert.gov/cas/techalerts/TA06-107A.html CERT/CC vulnerability note: VU#736934 http://www.kb.cert.org/vuls/id/736934 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html http://www.securityfocus.com/archive/1/436296/100/0/threaded http://www.securityfocus.com/archive/1/436338/100/0/threaded HPdes Security Advisory: HPSBTU02118 http://www.securityfocus.com/archive/1/434524/100/0/threaded HPdes Security Advisory: SSRT061145 http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 http://www.zerodayinitiative.com/advisories/ZDI-06-009.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11704 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1848 http://www.redhat.com/support/errata/RHSA-2006-0328.html http://www.redhat.com/support/errata/RHSA-2006-0329.html http://secunia.com/advisories/19631 http://secunia.com/advisories/19696 http://secunia.com/advisories/19714 http://secunia.com/advisories/19721 http://secunia.com/advisories/19729 http://secunia.com/advisories/19794 http://secunia.com/advisories/19811 SGI Security Advisory: 20060404-01-U ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc http://securityreason.com/securityalert/729 SuSE Security Announcement: SUSE-SA:2006:021 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html http://www.vupen.com/english/advisories/2006/1356 XForce ISS Database: mozilla-nshtmlcontentsink-memory-corruption(25819) https://exchange.xforce.ibmcloud.com/vulnerabilities/25819 Common Vulnerability Exposure (CVE) ID: CVE-2006-1045 BugTraq ID: 16881 http://www.securityfocus.com/bid/16881 Bugtraq: 20060228 Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/426347 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975 http://securityreason.com/securityalert/514 XForce ISS Database: thunderbird-inline-information-disclosure(24959) https://exchange.xforce.ibmcloud.com/vulnerabilities/24959 Common Vulnerability Exposure (CVE) ID: CVE-2006-1724 CERT/CC vulnerability note: VU#350262 http://www.kb.cert.org/vuls/id/350262 HPdes Security Advisory: HPSBUX02153 http://www.securityfocus.com/archive/1/446658/100/200/threaded HPdes Security Advisory: SSRT061181 https://bugzilla.mozilla.org/show_bug.cgi?id=282105 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10243 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1901 http://securitytracker.com/id?1015919 http://securitytracker.com/id?1015920 http://securitytracker.com/id?1015921 http://secunia.com/advisories/19649 http://secunia.com/advisories/22066 http://www.vupen.com/english/advisories/2006/3748 http://www.vupen.com/english/advisories/2008/0083 Common Vulnerability Exposure (CVE) ID: CVE-2006-1727 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10364 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1649 http://securitytracker.com/id?1015926 http://securitytracker.com/id?1015927 http://securitytracker.com/id?1015928 http://securitytracker.com/id?1015929 XForce ISS Database: mozilla-printpreview-privilege-escalation(25824) https://exchange.xforce.ibmcloud.com/vulnerabilities/25824 Common Vulnerability Exposure (CVE) ID: CVE-2006-1728 CERT/CC vulnerability note: VU#932734 http://www.kb.cert.org/vuls/id/932734 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10508 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1698 http://securitytracker.com/id?1015922 http://securitytracker.com/id?1015923 http://securitytracker.com/id?1015924 http://securitytracker.com/id?1015925 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 http://www.vupen.com/english/advisories/2007/0058 XForce ISS Database: mozilla-generatecrmfrequest-code-execution(25812) https://exchange.xforce.ibmcloud.com/vulnerabilities/25812 Common Vulnerability Exposure (CVE) ID: CVE-2006-1730 Bugtraq: 20060415 ZDI-06-010: Mozilla Firefox CSS Letter-Spacing Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/431060/100/0/threaded CERT/CC vulnerability note: VU#179014 http://www.kb.cert.org/vuls/id/179014 http://www.zerodayinitiative.com/advisories/ZDI-06-010.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10055 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1614 http://securitytracker.com/id?1015915 http://securitytracker.com/id?1015916 http://securitytracker.com/id?1015917 http://securitytracker.com/id?1015918 http://securityreason.com/securityalert/720 XForce ISS Database: mozilla-css-letterspacing-overflow(25826) https://exchange.xforce.ibmcloud.com/vulnerabilities/25826 Common Vulnerability Exposure (CVE) ID: CVE-2006-1731 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1955 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9604 XForce ISS Database: mozilla-valueof-xss(25820) https://exchange.xforce.ibmcloud.com/vulnerabilities/25820 Common Vulnerability Exposure (CVE) ID: CVE-2006-1732 https://bugzilla.mozilla.org/show_bug.cgi?id=313373 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10232 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1887 XForce ISS Database: mozilla-windows-controllers-xss(25818) https://exchange.xforce.ibmcloud.com/vulnerabilities/25818 Common Vulnerability Exposure (CVE) ID: CVE-2006-1733 CERT/CC vulnerability note: VU#488774 http://www.kb.cert.org/vuls/id/488774 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10815 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2020 XForce ISS Database: mozilla-valueof-code-execution(25817) https://exchange.xforce.ibmcloud.com/vulnerabilities/25817 Common Vulnerability Exposure (CVE) ID: CVE-2006-1734 CERT/CC vulnerability note: VU#842094 http://www.kb.cert.org/vuls/id/842094 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10755 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1247 XForce ISS Database: mozilla-cloneparent-code-execution(25816) https://exchange.xforce.ibmcloud.com/vulnerabilities/25816 Common Vulnerability Exposure (CVE) ID: CVE-2006-1735 CERT/CC vulnerability note: VU#813230 http://www.kb.cert.org/vuls/id/813230 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1037 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10930 XForce ISS Database: mozilla-xbl-code-execution(25815) https://exchange.xforce.ibmcloud.com/vulnerabilities/25815 Common Vulnerability Exposure (CVE) ID: CVE-2006-1737 CERT/CC vulnerability note: VU#329500 http://www.kb.cert.org/vuls/id/329500 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10817 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1829 XForce ISS Database: mozilla-javascript-regexpr-memory-corruption(25808) https://exchange.xforce.ibmcloud.com/vulnerabilities/25808 Common Vulnerability Exposure (CVE) ID: CVE-2006-1738 CERT/CC vulnerability note: VU#252324 http://www.kb.cert.org/vuls/id/252324 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1687 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9405 XForce ISS Database: mozilla-mozgrid-memory-corruption(25811) https://exchange.xforce.ibmcloud.com/vulnerabilities/25811 Common Vulnerability Exposure (CVE) ID: CVE-2006-1739 CERT/CC vulnerability note: VU#935556 http://www.kb.cert.org/vuls/id/935556 https://bugzilla.mozilla.org/show_bug.cgi?id=265736 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1667 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9817 XForce ISS Database: mozilla-css-memory-corruption(25810) https://exchange.xforce.ibmcloud.com/vulnerabilities/25810 Common Vulnerability Exposure (CVE) ID: CVE-2006-1741 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1855 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9167 XForce ISS Database: mozilla-eventhandler-xss(25806) https://exchange.xforce.ibmcloud.com/vulnerabilities/25806 Common Vulnerability Exposure (CVE) ID: CVE-2006-1742 CERT/CC vulnerability note: VU#492382 http://www.kb.cert.org/vuls/id/492382 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1087 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11808 XForce ISS Database: mozilla-garbage-memory-corruption(25807) https://exchange.xforce.ibmcloud.com/vulnerabilities/25807 Common Vulnerability Exposure (CVE) ID: CVE-2006-1790 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11202 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1266 XForce ISS Database: mozilla-installtrigger-memory-corruption(25809) https://exchange.xforce.ibmcloud.com/vulnerabilities/25809
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.