Test Kennung:	1.3.6.1.4.1.25623.1.0.57816
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Security Advisory RHSA-2007:0022
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory RHSA-2007:0022. SquirrelMail is a standards-based webmail package written in PHP. Several cross-site scripting bugs were discovered in SquirrelMail. An attacker could inject arbitrary Javascript or HTML content into SquirrelMail pages by tricking a user into visiting a carefully crafted URL. (CVE-2006-6142) Users of SquirrelMail should upgrade to this erratum package, which contains a backported patch to correct these issues. Notes: - - After installing this update, users are advised to restart their httpd service to ensure that the updated version functions correctly. - - config.php should NOT be modified, please modify config_local.php instead. - - Known Bug: The configuration generator may potentially produce bad options that interfere with the operation of this application. Applying specific config changes to config_local.php manually is recommended. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0022.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : High CVSS Score: 6.8
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6142 http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html BugTraq ID: 21414 http://www.securityfocus.com/bid/21414 BugTraq ID: 25159 http://www.securityfocus.com/bid/25159 Debian Security Information: DSA-1241 (Google Search) http://www.debian.org/security/2006/dsa-1241 http://fedoranews.org/cms/node/2438 http://fedoranews.org/cms/node/2439 http://www.mandriva.com/security/advisories?name=MDKSA-2006:226 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9988 http://www.redhat.com/support/errata/RHSA-2007-0022.html http://securitytracker.com/id?1017327 http://secunia.com/advisories/23195 http://secunia.com/advisories/23322 http://secunia.com/advisories/23409 http://secunia.com/advisories/23504 http://secunia.com/advisories/23811 http://secunia.com/advisories/24004 http://secunia.com/advisories/24284 http://secunia.com/advisories/26235 SGI Security Advisory: 20070201-01-P ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc SuSE Security Announcement: SUSE-SR:2006:029 (Google Search) http://www.novell.com/linux/security/advisories/2006_29_sr.html SuSE Security Announcement: SUSE-SR:2007:004 (Google Search) http://www.novell.com/linux/security/advisories/2007_4_sr.html http://www.vupen.com/english/advisories/2006/4828 http://www.vupen.com/english/advisories/2007/2732 XForce ISS Database: squirrelmail-magichtml-messages-xss(30694) https://exchange.xforce.ibmcloud.com/vulnerabilities/30694 XForce ISS Database: squirrelmail-mimeheader-xss(30695) https://exchange.xforce.ibmcloud.com/vulnerabilities/30695 XForce ISS Database: squirrelmail-webmail-compose-xss(30693) https://exchange.xforce.ibmcloud.com/vulnerabilities/30693
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.