ID de Prueba:	1.3.6.1.4.1.25623.1.0.102032
Categoría:	Mac OS X Local Security Checks
Título:	Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004
Resumen:	The remote host is missing Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004.
Descripción:	Summary: The remote host is missing Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004. Affected Software/OS: One or more of the following components are affected: Alias Manager CoreTypes c++filt Dock Launch Services Net-SNMP Ruby SMB File Server System Configuration Tomcat VPN WebKit Solution: Update your Mac OS X operating system. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2308 http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html BugTraq ID: 30018 http://www.securityfocus.com/bid/30018 http://securitytracker.com/id?1020390 http://secunia.com/advisories/30802 http://www.vupen.com/english/advisories/2008/1981/references XForce ISS Database: macos-aliasmanager-code-execution(43474) https://exchange.xforce.ibmcloud.com/vulnerabilities/43474 Common Vulnerability Exposure (CVE) ID: CVE-2008-2309 http://securitytracker.com/id?1020391 XForce ISS Database: macos-coretypes-code-execution(43493) https://exchange.xforce.ibmcloud.com/vulnerabilities/43493 Common Vulnerability Exposure (CVE) ID: CVE-2008-2310 http://securitytracker.com/id?1020392 XForce ISS Database: macos-c++filt-format-string(43494) https://exchange.xforce.ibmcloud.com/vulnerabilities/43494 Common Vulnerability Exposure (CVE) ID: CVE-2008-2314 http://securitytracker.com/id?1020395 XForce ISS Database: macos-dock-security-bypass(43497) https://exchange.xforce.ibmcloud.com/vulnerabilities/43497 Common Vulnerability Exposure (CVE) ID: CVE-2008-2311 http://securitytracker.com/id?1020393 XForce ISS Database: macos-launchservices-code-execution(43495) https://exchange.xforce.ibmcloud.com/vulnerabilities/43495 Common Vulnerability Exposure (CVE) ID: CVE-2008-0960 BugTraq ID: 29623 http://www.securityfocus.com/bid/29623 Bugtraq: 20080609 [oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing (Google Search) http://www.securityfocus.com/archive/1/493218/100/0/threaded Bugtraq: 20081031 VMSA-2008-0017 Updated ESX packages for libxml2, ucd-snmp, libtiff (Google Search) http://www.securityfocus.com/archive/1/497962/100/0/threaded Cert/CC Advisory: TA08-162A http://www.us-cert.gov/cas/techalerts/TA08-162A.html CERT/CC vulnerability note: VU#878044 http://www.kb.cert.org/vuls/id/878044 Cisco Security Advisory: 20080610 SNMP Version 3 Authentication Vulnerabilities http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml Debian Security Information: DSA-1663 (Google Search) http://www.debian.org/security/2008/dsa-1663 https://www.exploit-db.com/exploits/5790 https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00363.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00459.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00380.html http://security.gentoo.org/glsa/glsa-200808-02.xml HPdes Security Advisory: HPSBMA02439 http://marc.info/?l=bugtraq&m=127730470825399&w=2 HPdes Security Advisory: SSRT080082 http://www.mandriva.com/security/advisories?name=MDVSA-2008:118 http://www.ocert.org/advisories/ocert-2008-006.html http://www.vmware.com/security/advisories/VMSA-2008-0017.html http://www.openwall.com/lists/oss-security/2008/06/09/1 http://lists.ingate.com/pipermail/productinfo/2008/000021.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10820 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5785 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6414 RedHat Security Advisories: RHSA-2008:0528 http://rhn.redhat.com/errata/RHSA-2008-0528.html http://www.redhat.com/support/errata/RHSA-2008-0529.html http://www.securitytracker.com/id?1020218 http://secunia.com/advisories/30574 http://secunia.com/advisories/30596 http://secunia.com/advisories/30612 http://secunia.com/advisories/30615 http://secunia.com/advisories/30626 http://secunia.com/advisories/30647 http://secunia.com/advisories/30648 http://secunia.com/advisories/30665 http://secunia.com/advisories/31334 http://secunia.com/advisories/31351 http://secunia.com/advisories/31467 http://secunia.com/advisories/31568 http://secunia.com/advisories/32664 http://secunia.com/advisories/33003 http://secunia.com/advisories/35463 http://securityreason.com/securityalert/3933 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238865-1 SuSE Security Announcement: SUSE-SA:2008:039 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00000.html http://www.ubuntu.com/usn/usn-685-1 http://www.vupen.com/english/advisories/2008/1787/references http://www.vupen.com/english/advisories/2008/1788/references http://www.vupen.com/english/advisories/2008/1797/references http://www.vupen.com/english/advisories/2008/1800/references http://www.vupen.com/english/advisories/2008/1801/references http://www.vupen.com/english/advisories/2008/1836/references http://www.vupen.com/english/advisories/2008/2361 http://www.vupen.com/english/advisories/2008/2971 http://www.vupen.com/english/advisories/2009/1612 Common Vulnerability Exposure (CVE) ID: CVE-2008-2662 BugTraq ID: 29903 http://www.securityfocus.com/bid/29903 Bugtraq: 20080626 rPSA-2008-0206-1 ruby (Google Search) http://www.securityfocus.com/archive/1/493688/100/0/threaded Debian Security Information: DSA-1612 (Google Search) http://www.debian.org/security/2008/dsa-1612 Debian Security Information: DSA-1618 (Google Search) http://www.debian.org/security/2008/dsa-1618 https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html http://security.gentoo.org/glsa/glsa-200812-17.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:140 http://www.mandriva.com/security/advisories?name=MDVSA-2008:141 http://www.mandriva.com/security/advisories?name=MDVSA-2008:142 http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/ http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/ http://www.ruby-forum.com/topic/157034 http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11601 http://www.redhat.com/support/errata/RHSA-2008-0561.html http://www.securitytracker.com/id?1020347 http://secunia.com/advisories/30831 http://secunia.com/advisories/30867 http://secunia.com/advisories/30875 http://secunia.com/advisories/30894 http://secunia.com/advisories/31062 http://secunia.com/advisories/31181 http://secunia.com/advisories/31256 http://secunia.com/advisories/31687 http://secunia.com/advisories/33178 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562 SuSE Security Announcement: SUSE-SR:2008:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://www.ubuntu.com/usn/usn-621-1 http://www.vupen.com/english/advisories/2008/1907/references XForce ISS Database: ruby-rbstrbufappend-code-execution(43345) https://exchange.xforce.ibmcloud.com/vulnerabilities/43345 Common Vulnerability Exposure (CVE) ID: CVE-2008-2663 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10524 http://secunia.com/advisories/31090 XForce ISS Database: ruby-rbarystore-code-execution(43346) https://exchange.xforce.ibmcloud.com/vulnerabilities/43346 Common Vulnerability Exposure (CVE) ID: CVE-2008-2664 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9646 XForce ISS Database: ruby-rbstrformat-code-execution(43348) https://exchange.xforce.ibmcloud.com/vulnerabilities/43348 Common Vulnerability Exposure (CVE) ID: CVE-2008-2725 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-2727 http://www.redhat.com/archives/fedora-security-commits/2008-June/msg00005.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9606 XForce ISS Database: ruby-rbarysplice-code-execution(43350) https://exchange.xforce.ibmcloud.com/vulnerabilities/43350 Common Vulnerability Exposure (CVE) ID: CVE-2008-2726 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9959 XForce ISS Database: ruby-rbarysplice-begrlen-code-execution(43351) https://exchange.xforce.ibmcloud.com/vulnerabilities/43351 Common Vulnerability Exposure (CVE) ID: CVE-2008-1145 1019562 http://www.securitytracker.com/id?1019562 20080306 Re: [DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability http://www.securityfocus.com/archive/1/489218/100/0/threaded 20080306 [DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability http://www.securityfocus.com/archive/1/489205/100/0/threaded 20080325 rPSA-2008-0123-1 ruby http://www.securityfocus.com/archive/1/490056/100/0/threaded 28123 http://www.securityfocus.com/bid/28123 29232 http://secunia.com/advisories/29232 29357 http://secunia.com/advisories/29357 29536 http://secunia.com/advisories/29536 30802 31687 32371 http://secunia.com/advisories/32371 5215 https://www.exploit-db.com/exploits/5215 ADV-2008-0787 http://www.vupen.com/english/advisories/2008/0787 ADV-2008-1981 APPLE-SA-2008-06-30 FEDORA-2008-2443 https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00338.html FEDORA-2008-2458 https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00354.html MDVSA-2008:141 MDVSA-2008:142 RHSA-2008:0897 http://www.redhat.com/support/errata/RHSA-2008-0897.html SUSE-SR:2008:017 VU#404515 http://www.kb.cert.org/vuls/id/404515 http://support.apple.com/kb/HT2163 http://wiki.rpath.com/Advisories:rPSA-2008-0123 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0123 http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/ https://issues.rpath.com/browse/RPL-2338 oval:org.mitre.oval:def:10937 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10937 ruby-webrick-directory-traversal(41010) https://exchange.xforce.ibmcloud.com/vulnerabilities/41010 Common Vulnerability Exposure (CVE) ID: CVE-2008-1105 BugTraq ID: 29404 http://www.securityfocus.com/bid/29404 BugTraq ID: 31255 http://www.securityfocus.com/bid/31255 Bugtraq: 20080528 [SAMBA] CVE-2008-1105 - Boundary failure when parsing SMB responses (Google Search) http://www.securityfocus.com/archive/1/492683/100/0/threaded Bugtraq: 20080529 Secunia Research: Samba "receive_smb_raw()" Buffer OverflowVulnerability (Google Search) http://www.securityfocus.com/archive/1/492737/100/0/threaded Bugtraq: 20080602 rPSA-2008-0180-1 samba samba-client samba-server samba-swat (Google Search) http://www.securityfocus.com/archive/1/492903/100/0/threaded Debian Security Information: DSA-1590 (Google Search) http://www.debian.org/security/2008/dsa-1590 https://www.exploit-db.com/exploits/5712 https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01006.html https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01030.html https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01082.html http://security.gentoo.org/glsa/glsa-200805-23.xml HPdes Security Advisory: HPSBUX02341 http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657 HPdes Security Advisory: SSRT080075 http://www.mandriva.com/security/advisories?name=MDVSA-2008:108 http://secunia.com/secunia_research/2008-20/advisory/ http://lists.vmware.com/pipermail/security-announce/2008/000023.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10020 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5733 http://www.redhat.com/support/errata/RHSA-2008-0288.html http://www.redhat.com/support/errata/RHSA-2008-0289.html http://www.redhat.com/support/errata/RHSA-2008-0290.html http://securitytracker.com/id?1020123 http://secunia.com/advisories/30228 http://secunia.com/advisories/30385 http://secunia.com/advisories/30396 http://secunia.com/advisories/30442 http://secunia.com/advisories/30449 http://secunia.com/advisories/30478 http://secunia.com/advisories/30489 http://secunia.com/advisories/30543 http://secunia.com/advisories/30736 http://secunia.com/advisories/30835 http://secunia.com/advisories/31246 http://secunia.com/advisories/31911 http://secunia.com/advisories/33696 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473951 http://sunsolve.sun.com/search/document.do?assetkey=1-26-249086-1 SuSE Security Announcement: SUSE-SA:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00000.html http://www.ubuntu.com/usn/usn-617-1 http://www.ubuntu.com/usn/usn-617-2 http://www.vupen.com/english/advisories/2008/1681 http://www.vupen.com/english/advisories/2008/1908 http://www.vupen.com/english/advisories/2008/2222/references http://www.vupen.com/english/advisories/2008/2639 XForce ISS Database: samba-receivesmbraw-bo(42664) https://exchange.xforce.ibmcloud.com/vulnerabilities/42664 XForce ISS Database: xerox-controller-samba-code-execution(45251) https://exchange.xforce.ibmcloud.com/vulnerabilities/45251 Common Vulnerability Exposure (CVE) ID: CVE-2008-2313 http://securitytracker.com/id?1020394 XForce ISS Database: macos-usertemplate-code-execution(43496) https://exchange.xforce.ibmcloud.com/vulnerabilities/43496 Common Vulnerability Exposure (CVE) ID: CVE-2005-3164 BugTraq ID: 15003 http://www.securityfocus.com/bid/15003 http://jvn.jp/jp/JVN%2379314822/index.html https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E http://secunia.com/advisories/17019 http://secunia.com/advisories/30899 http://secunia.com/advisories/30908 http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 http://www.vupen.com/english/advisories/2008/1979/references Common Vulnerability Exposure (CVE) ID: CVE-2007-1355 BugTraq ID: 24058 http://www.securityfocus.com/bid/24058 Bugtraq: 20070519 [CVE-2007-1355] Tomcat documentation XSS vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/469067/100/0/threaded Bugtraq: 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/500396/100/0/threaded Bugtraq: 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1) (Google Search) http://www.securityfocus.com/archive/1/500412/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html HPdes Security Advisory: HPSBUX02262 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 HPdes Security Advisory: SSRT071447 http://osvdb.org/34875 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6111 http://www.redhat.com/support/errata/RHSA-2008-0261.html RedHat Security Advisories: RHSA-2008:0630 http://rhn.redhat.com/errata/RHSA-2008-0630.html http://secunia.com/advisories/27037 http://secunia.com/advisories/27727 http://secunia.com/advisories/31493 http://secunia.com/advisories/33668 http://securityreason.com/securityalert/2722 http://www.vupen.com/english/advisories/2007/3386 http://www.vupen.com/english/advisories/2009/0233 XForce ISS Database: tomcat-hello-xss(34377) https://exchange.xforce.ibmcloud.com/vulnerabilities/34377 Common Vulnerability Exposure (CVE) ID: CVE-2007-2449 BugTraq ID: 24476 http://www.securityfocus.com/bid/24476 Bugtraq: 20070614 [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples (Google Search) http://www.securityfocus.com/archive/1/471351/100/0/threaded http://www.mandriva.com/security/advisories?name=MDKSA-2007:241 https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E http://osvdb.org/36080 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10578 http://www.redhat.com/support/errata/RHSA-2007-0569.html http://www.securitytracker.com/id?1018245 http://secunia.com/advisories/26076 http://secunia.com/advisories/29392 http://securityreason.com/securityalert/2804 SuSE Security Announcement: SUSE-SR:2008:007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html SuSE Security Announcement: SUSE-SR:2009:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html http://www.vupen.com/english/advisories/2007/2213 XForce ISS Database: tomcat-example-xss(34869) https://exchange.xforce.ibmcloud.com/vulnerabilities/34869 Common Vulnerability Exposure (CVE) ID: CVE-2007-2450 BugTraq ID: 24475 http://www.securityfocus.com/bid/24475 Bugtraq: 20070614 [CVE-2007-2450]: Apache Tomcat XSS vulnerability in Manager (Google Search) http://www.securityfocus.com/archive/1/471357/100/0/threaded Debian Security Information: DSA-1468 (Google Search) http://www.debian.org/security/2008/dsa-1468 http://jvn.jp/jp/JVN%2307100457/index.html http://www.osvdb.org/36079 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11287 http://secunia.com/advisories/25678 http://secunia.com/advisories/28549 http://securityreason.com/securityalert/2813 XForce ISS Database: tomcat-hostmanager-xss(34868) https://exchange.xforce.ibmcloud.com/vulnerabilities/34868 Common Vulnerability Exposure (CVE) ID: CVE-2007-3382 AIX APAR: IZ55562 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562 BugTraq ID: 25316 http://www.securityfocus.com/bid/25316 Bugtraq: 20070814 CVE-2007-3382: Handling of cookies containing a ' character (Google Search) http://www.securityfocus.com/archive/1/476442/100/0/threaded Bugtraq: 20070814 Re: CVE-2007-3382: Handling of cookies containing a ' character (Google Search) http://www.securityfocus.com/archive/1/476466/100/0/threaded CERT/CC vulnerability note: VU#993544 http://www.kb.cert.org/vuls/id/993544 Debian Security Information: DSA-1447 (Google Search) http://www.debian.org/security/2008/dsa-1447 Debian Security Information: DSA-1453 (Google Search) http://www.debian.org/security/2008/dsa-1453 HPdes Security Advisory: HPSBTU02276 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554 HPdes Security Advisory: SSRT071472 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11269 http://www.redhat.com/support/errata/RHSA-2007-0871.html http://www.redhat.com/support/errata/RHSA-2007-0950.html http://www.redhat.com/support/errata/RHSA-2008-0195.html http://securitytracker.com/id?1018556 http://secunia.com/advisories/26466 http://secunia.com/advisories/26898 http://secunia.com/advisories/27267 http://secunia.com/advisories/28317 http://secunia.com/advisories/28361 http://secunia.com/advisories/29242 http://secunia.com/advisories/36486 SuSE Security Announcement: SUSE-SR:2008:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html http://www.vupen.com/english/advisories/2007/2902 http://www.vupen.com/english/advisories/2007/3527 XForce ISS Database: tomcat-quotecookie-information-disclosure(36006) https://exchange.xforce.ibmcloud.com/vulnerabilities/36006 Common Vulnerability Exposure (CVE) ID: CVE-2007-3383 BugTraq ID: 24999 http://www.securityfocus.com/bid/24999 Bugtraq: 20070721 CVE-2007-3383: XSS in Tomcat send mail example (Google Search) http://www.securityfocus.com/archive/1/474413/100/0/threaded CERT/CC vulnerability note: VU#862600 http://www.kb.cert.org/vuls/id/862600 http://seclists.org/fulldisclosure/2007/Jul/0448.html http://osvdb.org/39000 http://securityreason.com/securityalert/2918 http://www.vupen.com/english/advisories/2007/2618 XForce ISS Database: tomcat-sendmail-example-xss(35536) https://exchange.xforce.ibmcloud.com/vulnerabilities/35536 Common Vulnerability Exposure (CVE) ID: CVE-2007-5333 20080208 [SECURITY] CVE-2007-5333: Tomcat Cookie handling vulnerabilities http://www.securityfocus.com/archive/1/487822/100/0/threaded 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components http://www.securityfocus.com/archive/1/507985/100/0/threaded 27706 http://www.securityfocus.com/bid/27706 28878 http://secunia.com/advisories/28878 28884 http://secunia.com/advisories/28884 28915 http://secunia.com/advisories/28915 29711 http://secunia.com/advisories/29711 30676 http://secunia.com/advisories/30676 31681 http://www.securityfocus.com/bid/31681 32036 http://secunia.com/advisories/32036 32222 http://secunia.com/advisories/32222 33330 http://secunia.com/advisories/33330 3636 http://securityreason.com/securityalert/3636 37460 http://secunia.com/advisories/37460 44183 http://secunia.com/advisories/44183 57126 http://secunia.com/advisories/57126 ADV-2008-0488 http://www.vupen.com/english/advisories/2008/0488 ADV-2008-1856 http://www.vupen.com/english/advisories/2008/1856/references ADV-2008-2690 http://www.vupen.com/english/advisories/2008/2690 ADV-2008-2780 http://www.vupen.com/english/advisories/2008/2780 ADV-2009-3316 http://www.vupen.com/english/advisories/2009/3316 APPLE-SA-2008-10-09 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html FEDORA-2008-1467 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html FEDORA-2008-1603 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html GLSA-200804-10 http://security.gentoo.org/glsa/glsa-200804-10.xml HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 IZ20133 http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20133 IZ20991 http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20991 JVN#09470767 http://jvn.jp/jp/JVN%2309470767/index.html MDVSA-2009:018 http://www.mandriva.com/security/advisories?name=MDVSA-2009:018 MDVSA-2010:176 http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 SUSE-SR:2009:004 [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/ https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/ https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/ https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E http://support.apple.com/kb/HT3216 http://tomcat.apache.org/security-4.html http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-6.html http://www-01.ibm.com/support/docview.wss?uid=swg24018932 http://www-01.ibm.com/support/docview.wss?uid=swg27012047 http://www-01.ibm.com/support/docview.wss?uid=swg27012048 http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp08/html-single/Release_Notes/index.html http://www.vmware.com/security/advisories/VMSA-2008-0010.html http://www.vmware.com/security/advisories/VMSA-2009-0016.html https://bugzilla.redhat.com/show_bug.cgi?id=532111 oval:org.mitre.oval:def:11177 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11177 Common Vulnerability Exposure (CVE) ID: CVE-2007-3385 Bugtraq: 20070814 CVE-2007-3385: Handling of \" in cookies (Google Search) http://www.securityfocus.com/archive/1/476444/100/0/threaded https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9549 http://securitytracker.com/id?1018557 http://securityreason.com/securityalert/3011 XForce ISS Database: tomcat-slashcookie-information-disclosure(35999) https://exchange.xforce.ibmcloud.com/vulnerabilities/35999 Common Vulnerability Exposure (CVE) ID: CVE-2007-5461 BugTraq ID: 26070 http://www.securityfocus.com/bid/26070 BugTraq ID: 31681 Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) https://www.exploit-db.com/exploits/4530 http://marc.info/?l=full-disclosure&m=119239530508382 HPdes Security Advisory: HPSBST02955 http://www.mandriva.com/security/advisories?name=MDVSA-2009:136 http://issues.apache.org/jira/browse/GERONIMO-3549 http://mail-archives.apache.org/mod_mbox/tomcat-users/200710.mbox/%3C47135C2D.1000705@apache.org%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9202 http://www.redhat.com/support/errata/RHSA-2008-0042.html http://www.redhat.com/support/errata/RHSA-2008-0862.html http://www.securitytracker.com/id?1018864 http://secunia.com/advisories/27398 http://secunia.com/advisories/27446 http://secunia.com/advisories/27481 http://secunia.com/advisories/29313 http://secunia.com/advisories/32120 http://secunia.com/advisories/32266 http://www.vupen.com/english/advisories/2007/3622 http://www.vupen.com/english/advisories/2007/3671 http://www.vupen.com/english/advisories/2007/3674 http://www.vupen.com/english/advisories/2008/2823 XForce ISS Database: apache-tomcat-webdav-dir-traversal(37243) https://exchange.xforce.ibmcloud.com/vulnerabilities/37243 Common Vulnerability Exposure (CVE) ID: CVE-2007-6276 BugTraq ID: 26699 http://www.securityfocus.com/bid/26699 https://www.exploit-db.com/exploits/4690 http://www.securitytracker.com/id?1019052 http://secunia.com/advisories/27938 http://www.vupen.com/english/advisories/2007/4145 XForce ISS Database: macos-vpnd-dos(38855) https://exchange.xforce.ibmcloud.com/vulnerabilities/38855 Common Vulnerability Exposure (CVE) ID: CVE-2008-2307 http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html http://lists.apple.com/archives/security-announce/2008//Jun/msg00003.html http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html BugTraq ID: 29836 http://www.securityfocus.com/bid/29836 CERT/CC vulnerability note: VU#361043 http://www.kb.cert.org/vuls/id/361043 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00279.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00319.html http://www.securitytracker.com/id?1020330 http://secunia.com/advisories/30775 http://secunia.com/advisories/30801 http://secunia.com/advisories/30992 http://secunia.com/advisories/31074 http://www.vupen.com/english/advisories/2008/1882/references http://www.vupen.com/english/advisories/2008/1980 http://www.vupen.com/english/advisories/2008/2094/references
Copyright	Copyright (C) 2010 LSS

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.