Test Kennung:	1.3.6.1.4.1.25623.1.0.880724
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for seamonkey CESA-2009:0257 centos3 i386
Zusammenfassung:	The remote host is missing an update for the 'seamonkey'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'seamonkey' package(s) announced via the referenced advisory. Vulnerability Insight: SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey. (CVE-2009-0352, CVE-2009-0353) A flaw was found in the way malformed content was processed. A website containing specially-crafted content could, potentially, trick a SeaMonkey user into uploading a local file. (CVE-2009-0355) A flaw was found in the way SeaMonkey treated HTTPOnly cookies. An attacker able to execute arbitrary JavaScript on a target site using HTTPOnly cookies may be able to use this flaw to steal the cookie. (CVE-2009-0357) All SeaMonkey users should upgrade to these updated packages, which contain backported patches that correct these issues. After installing the update, SeaMonkey must be restarted for the changes to take effect. Affected Software/OS: seamonkey on CentOS 3 Solution: Please install the updated packages. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0352 BugTraq ID: 33598 http://www.securityfocus.com/bid/33598 Debian Security Information: DSA-1830 (Google Search) http://www.debian.org/security/2009/dsa-1830 https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:044 http://www.mandriva.com/security/advisories?name=MDVSA-2009:083 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10699 RedHat Security Advisories: RHSA-2009:0256 http://rhn.redhat.com/errata/RHSA-2009-0256.html http://www.redhat.com/support/errata/RHSA-2009-0257.html http://www.redhat.com/support/errata/RHSA-2009-0258.html http://www.securitytracker.com/id?1021663 http://secunia.com/advisories/33799 http://secunia.com/advisories/33802 http://secunia.com/advisories/33808 http://secunia.com/advisories/33809 http://secunia.com/advisories/33816 http://secunia.com/advisories/33831 http://secunia.com/advisories/33841 http://secunia.com/advisories/33846 http://secunia.com/advisories/33869 http://secunia.com/advisories/34324 http://secunia.com/advisories/34387 http://secunia.com/advisories/34417 http://secunia.com/advisories/34462 http://secunia.com/advisories/34464 http://secunia.com/advisories/34527 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952 SuSE Security Announcement: SUSE-SA:2009:009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html SuSE Security Announcement: SUSE-SA:2009:023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html http://www.ubuntu.com/usn/usn-717-1 https://usn.ubuntu.com/741-1/ http://www.vupen.com/english/advisories/2009/0313 Common Vulnerability Exposure (CVE) ID: CVE-2009-0353 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11193 Common Vulnerability Exposure (CVE) ID: CVE-2009-0355 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9161 http://www.securitytracker.com/id?1021665 http://www.ubuntu.com/usn/usn-717-2 Common Vulnerability Exposure (CVE) ID: CVE-2009-0357 http://ha.ckers.org/blog/20070511/bluehat-errata/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9459 http://www.securitytracker.com/id?1021668
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.