Test Kennung:	1.3.6.1.4.1.25623.1.0.64005
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: mod_perl
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: mod_perl mod_perl2 CVE-2009-0796 Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0796 1021508 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1 1021709 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021709.1-1 1021988 http://www.securitytracker.com/id?1021988 20090415 XSS with mod_perl perl_status utility http://www.securityfocus.com/archive/1/502709/100/0/threaded 34383 http://www.securityfocus.com/bid/34383 34597 http://secunia.com/advisories/34597 ADV-2009-0943 http://www.vupen.com/english/advisories/2009/0943 APPLE-SA-2010-11-10-1 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html MDVSA-2009:091 http://www.mandriva.com/security/advisories?name=MDVSA-2009:091 [modperl-cvs] 20090401 svn commit: r761081 - in /perl/modperl/branches/1.x: Changes lib/Apache/Status.pm http://www.gossamer-threads.com/lists/modperl/modperl-cvs/99477#99477 [modperl] 20090401 [SECURITY] [CVE-2009-0796] Vulnerability found in Apache::Status and Apache2::Status http://www.gossamer-threads.com/lists/modperl/modperl/99475#99475 http://support.apple.com/kb/HT4435 http://svn.apache.org/viewvc/perl/modperl/branches/1.x/lib/Apache/Status.pm?r1=177851&r2=761081&pathrev=761081&diff_format=h http://svn.apache.org/viewvc?view=rev&revision=761081 https://bugzilla.redhat.com/show_bug.cgi?id=494402 https://launchpad.net/bugs/cve/2009-0796 oval:org.mitre.oval:def:8488 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8488
Copyright	Copyright (C) 2009 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.