Test Kennung:	1.3.6.1.4.1.25623.1.0.61662
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDVSA-2008:205 (mozilla-firefox)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to mozilla-firefox announced via advisory MDVSA-2008:205. Security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.17 (CVE-2008-0016, CVE-2008-3835, CVE-2008-3836, CVE-2008-3837, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060, CVE-2008-4061, CVE-2008-4062, CVE-2008-4065, CVE-2008-4066, CVE-2008-4067, CVE-2008-4068, CVE-2008-4069). This update provides the latest Firefox to correct these issues. Affected: 2008.0, 2008.1, Corporate 3.0, Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2008:205 http://www.mozilla.org/security/announce/2008/mfsa2008-37.html http://www.mozilla.org/security/announce/2008/mfsa2008-38.html http://www.mozilla.org/security/announce/2008/mfsa2008-39.html http://www.mozilla.org/security/announce/2008/mfsa2008-40.html http://www.mozilla.org/security/announce/2008/mfsa2008-41.html http://www.mozilla.org/security/announce/2008/mfsa2008-42.html http://www.mozilla.org/security/announce/2008/mfsa2008-43.html http://www.mozilla.org/security/announce/2008/mfsa2008-44.html http://www.mozilla.org/security/announce/2008/mfsa2008-45.html Risk factor : Critical CVSS Score: 10.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0016 BugTraq ID: 31397 http://www.securityfocus.com/bid/31397 Debian Security Information: DSA-1649 (Google Search) http://www.debian.org/security/2008/dsa-1649 Debian Security Information: DSA-1669 (Google Search) http://www.debian.org/security/2008/dsa-1669 Debian Security Information: DSA-1696 (Google Search) http://www.debian.org/security/2009/dsa-1696 Debian Security Information: DSA-1697 (Google Search) http://www.debian.org/security/2009/dsa-1697 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 http://www.mandriva.com/security/advisories?name=MDVSA-2008:206 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11579 http://www.redhat.com/support/errata/RHSA-2008-0882.html http://www.redhat.com/support/errata/RHSA-2008-0908.html http://www.securitytracker.com/id?1020913 http://secunia.com/advisories/31984 http://secunia.com/advisories/31985 http://secunia.com/advisories/32010 http://secunia.com/advisories/32012 http://secunia.com/advisories/32042 http://secunia.com/advisories/32044 http://secunia.com/advisories/32082 http://secunia.com/advisories/32092 http://secunia.com/advisories/32144 http://secunia.com/advisories/32185 http://secunia.com/advisories/32196 http://secunia.com/advisories/32845 http://secunia.com/advisories/33433 http://secunia.com/advisories/33434 http://secunia.com/advisories/34501 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 SuSE Security Announcement: SUSE-SA:2008:050 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html http://www.ubuntu.com/usn/usn-645-1 http://www.ubuntu.com/usn/usn-645-2 http://www.vupen.com/english/advisories/2008/2661 http://www.vupen.com/english/advisories/2009/0977 Common Vulnerability Exposure (CVE) ID: CVE-2008-3835 BugTraq ID: 31346 http://www.securityfocus.com/bid/31346 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9643 http://www.securitytracker.com/id?1020919 http://secunia.com/advisories/32007 http://secunia.com/advisories/32025 http://www.ubuntu.com/usn/usn-647-1 XForce ISS Database: firefox-onchannelredirect-security-bypass(45347) https://exchange.xforce.ibmcloud.com/vulnerabilities/45347 Common Vulnerability Exposure (CVE) ID: CVE-2008-3836 http://www.securitytracker.com/id?1020914 XForce ISS Database: firefox-feedwriter-code-execution(45350) https://exchange.xforce.ibmcloud.com/vulnerabilities/45350 Common Vulnerability Exposure (CVE) ID: CVE-2008-3837 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9950 http://www.redhat.com/support/errata/RHSA-2008-0879.html http://www.securitytracker.com/id?1020922 http://secunia.com/advisories/31987 http://secunia.com/advisories/32011 http://secunia.com/advisories/32089 http://secunia.com/advisories/32095 http://secunia.com/advisories/32096 XForce ISS Database: firefox-draganddrop-weak-security(45348) https://exchange.xforce.ibmcloud.com/vulnerabilities/45348 Common Vulnerability Exposure (CVE) ID: CVE-2008-4058 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9679 http://www.securitytracker.com/id?1020915 XForce ISS Database: firefox3-xpcnativewrappers-code-execution(45349) https://exchange.xforce.ibmcloud.com/vulnerabilities/45349 Common Vulnerability Exposure (CVE) ID: CVE-2008-4059 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9529 XForce ISS Database: firefox2-xpcnativewrappers-code-execution(45352) https://exchange.xforce.ibmcloud.com/vulnerabilities/45352 Common Vulnerability Exposure (CVE) ID: CVE-2008-4060 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11607 XForce ISS Database: firefox-xslt-code-execution(45353) https://exchange.xforce.ibmcloud.com/vulnerabilities/45353 Common Vulnerability Exposure (CVE) ID: CVE-2008-4061 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10794 http://www.securitytracker.com/id?1020916 XForce ISS Database: multiple-mozilla-layout-code-execution(45351) https://exchange.xforce.ibmcloud.com/vulnerabilities/45351 Common Vulnerability Exposure (CVE) ID: CVE-2008-4062 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10206 XForce ISS Database: multiple-mozilla-javascript-code-execution(45355) https://exchange.xforce.ibmcloud.com/vulnerabilities/45355 Common Vulnerability Exposure (CVE) ID: CVE-2008-4065 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11383 http://www.securitytracker.com/id?1020920 XForce ISS Database: firefox-bom-security-bypass(45356) https://exchange.xforce.ibmcloud.com/vulnerabilities/45356 Common Vulnerability Exposure (CVE) ID: CVE-2008-4066 http://jvn.jp/en/jp/JVN96950482/index.html http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000058.html http://blogs.technet.com/bluehat/archive/2008/08/14/targeted-fuzzing.aspx http://www.thespanner.co.uk/2008/06/30/javascript-protocol-fuzz-results/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8880 XForce ISS Database: firefox-htmlparser-security-bypass(45358) https://exchange.xforce.ibmcloud.com/vulnerabilities/45358 Common Vulnerability Exposure (CVE) ID: CVE-2008-4067 http://www.0x000000.com/?i=422 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10770 http://www.securitytracker.com/id?1020921 XForce ISS Database: mozilla-protocol-directory-traversal(45359) https://exchange.xforce.ibmcloud.com/vulnerabilities/45359 Common Vulnerability Exposure (CVE) ID: CVE-2008-4068 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11471 XForce ISS Database: mozilla-resourceprotocol-info-disclosure(45360) https://exchange.xforce.ibmcloud.com/vulnerabilities/45360 Common Vulnerability Exposure (CVE) ID: CVE-2008-4069 http://www.blackhat.com/presentations/bh-usa-08/Hoffman/Hoffman-BH2008-CircumventingJavaScript.ppt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11000 http://www.securitytracker.com/id?1020923 XForce ISS Database: firefox-xbmdecoder-information-disclosure(45361) https://exchange.xforce.ibmcloud.com/vulnerabilities/45361
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.