Test Kennung:	1.3.6.1.4.1.25623.1.0.831302
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Update for MHonArc MDVSA-2011:003 (MHonArc)
Zusammenfassung:	The remote host is missing an update for the 'MHonArc'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'MHonArc' package(s) announced via the referenced advisory. Vulnerability Insight: Multiple vulnerabilities has been found and corrected in MHonArc: MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags, as demonstrated by a dy>dy>dy>dy> sequence, a different vulnerability than CVE-2010-4524 (CVE-2010-1677). Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element, as demonstrated by ipt> and ipt> sequences (CVE-2010-4524). Packages for 2009.0 are provided as of the Extended Maintenance Program. The updated packages have been upgraded to the latest version (2.6.18) which is not vulnerable to these issues. Affected Software/OS: MHonArc on Mandriva Linux 2009.0, Mandriva Linux 2009.0/X86_64, Mandriva Linux 2010.0, Mandriva Linux 2010.0/X86_64, Mandriva Linux 2010.1, Mandriva Linux 2010.1/X86_64, Mandriva Enterprise Server 5, Mandriva Enterprise Server 5/X86_64 Solution: Please Install the Updated Packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4524 42694 http://secunia.com/advisories/42694 45528 http://www.securityfocus.com/bid/45528 ADV-2010-3344 http://www.vupen.com/english/advisories/2010/3344 ADV-2011-0067 http://www.vupen.com/english/advisories/2011/0067 MDVSA-2011:003 http://lists.mandriva.com/security-announce/2011-01/msg00004.php [mhonarc-dev] 20101230 [bug #32013] CVE-2010-4524: Improper escaping of certain HTML sequences (XSS) http://www.mail-archive.com/mhonarc-dev%40mhonarc.org/msg01296.html [oss-security] 20101221 CVE Request -- MHonArc: Improper escaping of certain HTML sequences (XSS) http://openwall.com/lists/oss-security/2010/12/21/4 [oss-security] 20101221 Re: CVE Request -- MHonArc: Improper escaping of certain HTML sequences (XSS) http://openwall.com/lists/oss-security/2010/12/21/7 http://openwall.com/lists/oss-security/2010/12/22/4 http://openwall.com/lists/oss-security/2010/12/22/5 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607693 http://savannah.nongnu.org/bugs/?32013 https://bugzilla.redhat.com/show_bug.cgi?id=664718 Common Vulnerability Exposure (CVE) ID: CVE-2010-1677 http://www.mail-archive.com/mhonarc-dev@mhonarc.org/msg01297.html XForce ISS Database: mhonarc-start-tags-dos(64656) https://exchange.xforce.ibmcloud.com/vulnerabilities/64656
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.