ID de Prueba:	1.3.6.1.4.1.25623.1.0.63629
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: roundcube
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to the system as announced in the referenced advisory. The following package is affected: roundcube CVE-2009-0413 Cross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background attribute embedded in an HTML e-mail message. Solution: Update your system with the appropriate patches or software upgrades. http://secunia.com/advisories/33622/ http://sourceforge.net/forum/forum.php?forum_id=927958 http://trac.roundcube.net/changeset/2245 http://trac.roundcube.net/ticket/1485689 http://www.vuxml.org/freebsd/35c0b572-125a-11de-a964-0030843d3802.html CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0413 BugTraq ID: 33372 http://www.securityfocus.com/bid/33372 https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00082.html http://secunia.com/advisories/33622 http://secunia.com/advisories/33827 http://www.vupen.com/english/advisories/2009/0192 XForce ISS Database: roundcube-html-xss(48129) https://exchange.xforce.ibmcloud.com/vulnerabilities/48129
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.