Test Kennung:	1.3.6.1.4.1.25623.1.0.57766
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Security Advisory RHSA-2007:0009
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory RHSA-2007:0009. The flash-plugin package contains a Firefox-compatible Adobe Flash Player browser plug-in. A flaw was found in the way the Adobe Flash Player generates HTTP requests. It was possible for a malicious Adobe Flash file to modify the HTTP header of the client request, which could be leveraged to exploit certain HTTP proxy and web server flaws. (CVE-2006-5330) Users of Adobe Flash Player should upgrade to this updated package, which contains version 7.0.69 and is not vulnerable to this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0009.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : Medium CVSS Score: 5.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-5330 http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html BugTraq ID: 20592 http://www.securityfocus.com/bid/20592 Bugtraq: 20061017 Rapid7 Advisory R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin (Google Search) http://www.securityfocus.com/archive/1/448997/100/0/threaded Cert/CC Advisory: TA07-072A http://www.us-cert.gov/cas/techalerts/TA07-072A.html http://www.rapid7.com/advisories/R7-0026.jsp http://www.osvdb.org/29863 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11405 http://www.redhat.com/support/errata/RHSA-2007-0009.html http://securitytracker.com/id?1017078 http://secunia.com/advisories/22467 http://secunia.com/advisories/23324 http://secunia.com/advisories/23581 http://secunia.com/advisories/24479 http://secunia.com/advisories/25467 http://securityreason.com/securityalert/1737 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102932-1 SuSE Security Announcement: SUSE-SA:2006:077 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Dec/0006.html http://www.vupen.com/english/advisories/2006/4094 http://www.vupen.com/english/advisories/2007/0930 http://www.vupen.com/english/advisories/2007/1999 XForce ISS Database: flashplayer-multiple-xsrf(29634) https://exchange.xforce.ibmcloud.com/vulnerabilities/29634
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.