ID de Prueba:	1.3.6.1.4.1.25623.1.0.55024
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: gforge
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: gforge CVE-2005-2430 Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id or (2) group_id parameter to forum.php, (3) project_task_id parameter to task.php, (4) id parameter to detail.php, (5) the text field on the search page, (6) group_id parameter to qrs.php, (7) form, (8) rows, (9) cols or (10) wrap parameter to notepad.php, or the login field on the login form. CVE-2005-2431 The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses (aka mail bomb). Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2430 BugTraq ID: 14405 http://www.securityfocus.com/bid/14405 Bugtraq: 20050727 Cross Site Scripting vulnerabilities in GForge (Google Search) http://marc.info/?l=bugtraq&m=112259845904350&w=2 Debian Security Information: DSA-1094 (Google Search) http://www.debian.org/security/2006/dsa-1094 http://www.osvdb.org/18299 http://www.osvdb.org/18300 http://www.osvdb.org/18301 http://www.osvdb.org/18302 http://www.osvdb.org/18303 http://www.osvdb.org/18304 http://secunia.com/advisories/16253/ http://secunia.com/advisories/20622 XForce ISS Database: gforge-multiple-xss(21558) https://exchange.xforce.ibmcloud.com/vulnerabilities/21558 Common Vulnerability Exposure (CVE) ID: CVE-2005-2431
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.