ID de Prueba:	1.3.6.1.4.1.25623.1.0.61320
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2008:155 (mozilla-thunderbird)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to mozilla-thunderbird announced via advisory MDVSA-2008:155. A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.16 (CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237, CVE-2008-2785, CVE-2008-2798, CVE-2008-2799, CVE-2008-2802, CVE-2008-2803, CVE-2008-2807, CVE-2008-2809, CVE-2008-2811). This update provides the latest Thunderbird to correct these issues. It also provides Thunderbird 2.x for Corporate 3.0 systems. Affected: 2008.0, 2008.1, Corporate 3.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2008:155 http://www.mozilla.org/security/announce/2008/mfsa2008-14.html http://www.mozilla.org/security/announce/2008/mfsa2008-15.html http://www.mozilla.org/security/announce/2008/mfsa2008-21.html http://www.mozilla.org/security/announce/2008/mfsa2008-24.html http://www.mozilla.org/security/announce/2008/mfsa2008-25.html http://www.mozilla.org/security/announce/2008/mfsa2008-26.html http://www.mozilla.org/security/announce/2008/mfsa2008-29.html http://www.mozilla.org/security/announce/2008/mfsa2008-31.html http://www.mozilla.org/security/announce/2008/mfsa2008-33.html http://www.mozilla.org/security/announce/2008/mfsa2008-34.html Risk factor : Critical CVSS Score: 10.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1233 BugTraq ID: 28448 http://www.securityfocus.com/bid/28448 Bugtraq: 20080327 rPSA-2008-0128-1 firefox (Google Search) http://www.securityfocus.com/archive/1/490196/100/0/threaded Cert/CC Advisory: TA08-087A http://www.us-cert.gov/cas/techalerts/TA08-087A.html CERT/CC vulnerability note: VU#466521 http://www.kb.cert.org/vuls/id/466521 Debian Security Information: DSA-1532 (Google Search) http://www.debian.org/security/2008/dsa-1532 Debian Security Information: DSA-1534 (Google Search) http://www.debian.org/security/2008/dsa-1534 Debian Security Information: DSA-1535 (Google Search) http://www.debian.org/security/2008/dsa-1535 Debian Security Information: DSA-1574 (Google Search) http://www.debian.org/security/2008/dsa-1574 https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:080 http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11078 http://www.redhat.com/support/errata/RHSA-2008-0207.html RedHat Security Advisories: RHSA-2008:0208 http://rhn.redhat.com/errata/RHSA-2008-0208.html http://www.redhat.com/support/errata/RHSA-2008-0209.html http://www.securitytracker.com/id?1019694 http://secunia.com/advisories/29391 http://secunia.com/advisories/29526 http://secunia.com/advisories/29539 http://secunia.com/advisories/29541 http://secunia.com/advisories/29547 http://secunia.com/advisories/29548 http://secunia.com/advisories/29550 http://secunia.com/advisories/29558 http://secunia.com/advisories/29560 http://secunia.com/advisories/29607 http://secunia.com/advisories/29616 http://secunia.com/advisories/29645 http://secunia.com/advisories/30016 http://secunia.com/advisories/30094 http://secunia.com/advisories/30105 http://secunia.com/advisories/30192 http://secunia.com/advisories/30327 http://secunia.com/advisories/30370 http://secunia.com/advisories/30620 http://secunia.com/advisories/31043 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 SuSE Security Announcement: SUSE-SA:2008:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html http://www.ubuntu.com/usn/usn-592-1 http://www.ubuntu.com/usn/usn-605-1 http://www.vupen.com/english/advisories/2008/0998/references http://www.vupen.com/english/advisories/2008/0999/references http://www.vupen.com/english/advisories/2008/1793/references http://www.vupen.com/english/advisories/2008/2091/references XForce ISS Database: mozilla-settimeout-code-execution(41443) https://exchange.xforce.ibmcloud.com/vulnerabilities/41443 Common Vulnerability Exposure (CVE) ID: CVE-2008-1234 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9551 XForce ISS Database: firefox-eventhandlers-xss(41455) https://exchange.xforce.ibmcloud.com/vulnerabilities/41455 Common Vulnerability Exposure (CVE) ID: CVE-2008-1235 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10980 XForce ISS Database: mozilla-principal-code-execution(41457) https://exchange.xforce.ibmcloud.com/vulnerabilities/41457 Common Vulnerability Exposure (CVE) ID: CVE-2008-1236 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11788 http://www.securitytracker.com/id?1019695 XForce ISS Database: mozilla-layoutengine-code-execution(41445) https://exchange.xforce.ibmcloud.com/vulnerabilities/41445 Common Vulnerability Exposure (CVE) ID: CVE-2008-1237 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9651 SuSE Security Announcement: SUSE-SR:2008:011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html XForce ISS Database: firefox-javascript-engine-code-execution(41446) https://exchange.xforce.ibmcloud.com/vulnerabilities/41446 Common Vulnerability Exposure (CVE) ID: CVE-2008-2785 BugTraq ID: 29802 http://www.securityfocus.com/bid/29802 Bugtraq: 20080717 ZDI-08-044: Mozilla Firefox CSSValue Array Memory Corruption Vulnerability (Google Search) http://www.securityfocus.com/archive/1/494504/100/0/threaded Bugtraq: 20080729 rPSA-2008-0238-1 firefox (Google Search) http://www.securityfocus.com/archive/1/494860/100/0/threaded Debian Security Information: DSA-1614 (Google Search) http://www.debian.org/security/2008/dsa-1614 Debian Security Information: DSA-1615 (Google Search) http://www.debian.org/security/2008/dsa-1615 Debian Security Information: DSA-1621 (Google Search) http://www.debian.org/security/2008/dsa-1621 Debian Security Information: DSA-1697 (Google Search) http://www.debian.org/security/2009/dsa-1697 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00667.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00672.html https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html http://security.gentoo.org/glsa/glsa-200808-03.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:148 http://blog.mozilla.com/security/2008/06/18/new-security-issue-under-investigation/ http://dvlabs.tippingpoint.com/blog/2008/06/18/vulnerability-in-mozilla-firefox-30 http://www.zerodayinitiative.com/advisories/ZDI-08-044/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9900 http://www.redhat.com/support/errata/RHSA-2008-0597.html http://www.redhat.com/support/errata/RHSA-2008-0598.html http://www.redhat.com/support/errata/RHSA-2008-0599.html RedHat Security Advisories: RHSA-2008:0616 http://rhn.redhat.com/errata/RHSA-2008-0616.html http://www.securitytracker.com/id?1020336 http://secunia.com/advisories/30761 http://secunia.com/advisories/31121 http://secunia.com/advisories/31122 http://secunia.com/advisories/31129 http://secunia.com/advisories/31144 http://secunia.com/advisories/31145 http://secunia.com/advisories/31154 http://secunia.com/advisories/31157 http://secunia.com/advisories/31176 http://secunia.com/advisories/31183 http://secunia.com/advisories/31195 http://secunia.com/advisories/31220 http://secunia.com/advisories/31253 http://secunia.com/advisories/31261 http://secunia.com/advisories/31270 http://secunia.com/advisories/31286 http://secunia.com/advisories/31306 http://secunia.com/advisories/31377 http://secunia.com/advisories/31403 http://secunia.com/advisories/33433 http://secunia.com/advisories/34501 http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380974 http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380767 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484 http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 http://www.ubuntu.com/usn/usn-623-1 http://www.ubuntu.com/usn/usn-626-1 http://www.ubuntu.com/usn/usn-626-2 http://www.ubuntu.com/usn/usn-629-1 http://www.vupen.com/english/advisories/2008/1873 http://www.vupen.com/english/advisories/2009/0977 XForce ISS Database: firefox-unspecified-code-execution(43167) https://exchange.xforce.ibmcloud.com/vulnerabilities/43167 Common Vulnerability Exposure (CVE) ID: CVE-2008-2798 BugTraq ID: 30038 http://www.securityfocus.com/bid/30038 Bugtraq: 20080708 rPSA-2008-0216-1 firefox (Google Search) http://www.securityfocus.com/archive/1/494080/100/0/threaded Debian Security Information: DSA-1607 (Google Search) http://www.debian.org/security/2008/dsa-1607 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:136 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10087 http://www.redhat.com/support/errata/RHSA-2008-0547.html http://www.redhat.com/support/errata/RHSA-2008-0549.html http://www.redhat.com/support/errata/RHSA-2008-0569.html http://www.securitytracker.com/id?1020419 http://secunia.com/advisories/30878 http://secunia.com/advisories/30898 http://secunia.com/advisories/30903 http://secunia.com/advisories/30911 http://secunia.com/advisories/30915 http://secunia.com/advisories/30949 http://secunia.com/advisories/31005 http://secunia.com/advisories/31008 http://secunia.com/advisories/31021 http://secunia.com/advisories/31023 http://secunia.com/advisories/31069 http://secunia.com/advisories/31076 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 SuSE Security Announcement: SUSE-SA:2008:034 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html http://www.ubuntu.com/usn/usn-619-1 http://www.vupen.com/english/advisories/2008/1993/references Common Vulnerability Exposure (CVE) ID: CVE-2008-2799 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10743 Common Vulnerability Exposure (CVE) ID: CVE-2008-2802 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11121 Common Vulnerability Exposure (CVE) ID: CVE-2008-2803 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10747 Common Vulnerability Exposure (CVE) ID: CVE-2008-2807 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9432 XForce ISS Database: firefox-propertiesfile-info-disclosure(50656) https://exchange.xforce.ibmcloud.com/vulnerabilities/50656 Common Vulnerability Exposure (CVE) ID: CVE-2008-2809 Bugtraq: 20071118 Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Google Search) http://www.securityfocus.com/archive/1/483929/100/100/threaded Bugtraq: 20071118 RE: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Google Search) http://www.securityfocus.com/archive/1/483960/100/100/threaded Bugtraq: 20071118 Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Google Search) http://www.securityfocus.com/archive/1/483937/100/100/threaded http://nils.toedtmann.net/pub/subjectAltName.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10205 http://securitytracker.com/id?1018979 http://securityreason.com/securityalert/3498 XForce ISS Database: mozilla-altnames-spoofing(43524) https://exchange.xforce.ibmcloud.com/vulnerabilities/43524 Common Vulnerability Exposure (CVE) ID: CVE-2008-2811 CERT/CC vulnerability note: VU#607267 http://www.kb.cert.org/vuls/id/607267 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9865
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.