Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2014.0349
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2014-0349)
Zusammenfassung:	The remote host is missing an update for the 'bugzilla' package(s) announced via the MGASA-2014-0349 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'bugzilla' package(s) announced via the MGASA-2014-0349 advisory. Vulnerability Insight: Updated bugzilla packages fix security vulnerabilities: Adobe does not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against Bugzilla's JSONP endpoint, possibly obtaining sensitive bug information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API (CVE-2014-1546). Affected Software/OS: 'bugzilla' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1546 Bugtraq: 20140724 Security advisory for Bugzilla 4.5.5, 4.4.5, 4.2.10, and 4.0.14 (Google Search) http://www.securityfocus.com/archive/1/532895 http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136369.html http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136217.html http://www.mandriva.com/security/advisories?name=MDVSA-2014:169 http://www.securitytracker.com/id/1030648
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.