ID de Prueba:	1.3.6.1.4.1.25623.1.0.64005
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: mod_perl
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: mod_perl mod_perl2 CVE-2009-0796 Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0796 1021508 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1 1021709 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021709.1-1 1021988 http://www.securitytracker.com/id?1021988 20090415 XSS with mod_perl perl_status utility http://www.securityfocus.com/archive/1/502709/100/0/threaded 34383 http://www.securityfocus.com/bid/34383 34597 http://secunia.com/advisories/34597 ADV-2009-0943 http://www.vupen.com/english/advisories/2009/0943 APPLE-SA-2010-11-10-1 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html MDVSA-2009:091 http://www.mandriva.com/security/advisories?name=MDVSA-2009:091 [modperl-cvs] 20090401 svn commit: r761081 - in /perl/modperl/branches/1.x: Changes lib/Apache/Status.pm http://www.gossamer-threads.com/lists/modperl/modperl-cvs/99477#99477 [modperl] 20090401 [SECURITY] [CVE-2009-0796] Vulnerability found in Apache::Status and Apache2::Status http://www.gossamer-threads.com/lists/modperl/modperl/99475#99475 http://support.apple.com/kb/HT4435 http://svn.apache.org/viewvc/perl/modperl/branches/1.x/lib/Apache/Status.pm?r1=177851&r2=761081&pathrev=761081&diff_format=h http://svn.apache.org/viewvc?view=rev&revision=761081 https://bugzilla.redhat.com/show_bug.cgi?id=494402 https://launchpad.net/bugs/cve/2009-0796 oval:org.mitre.oval:def:8488 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8488
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.