ID de Prueba:	1.3.6.1.4.1.25623.1.0.51440
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2003:697
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2003:697. phpGroupWare[1] is a web-based groupware suite written in PHP. François Sorin discovered[2] several cross-site-scripting vulnerabilities in versions of phpgroupware <= 0.9.14.003. By exploiting these vulnerabilities, a remote attacker can obtain sensitive information such as authentication cookies, or change the behavior of the browser by crafting a special URL with javascript in it and somehow having an user click on it. This announcement updates phpGroupware to the latest stable version: 0.9.14.005. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://www.phpgroupware.org/ http://www.security-corporation.com/articles-20030702-005.html http://www.securityspace.com/smysecure/catid.html?in=CLA-2003:697 http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=002003 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.