ID de Prueba:	1.3.6.1.4.1.25623.1.0.66487
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2009:091-1 (mod_perl)
Resumen:	The remote host is missing an update to mod_perl;announced via advisory MDVSA-2009:091-1.
Descripción:	Summary: The remote host is missing an update to mod_perl announced via advisory MDVSA-2009:091-1. Vulnerability Insight: A vulnerability has been found and corrected in mod_perl v1.x and v2.x: Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI (CVE-2009-0796). The updated packages have been patched to correct these issues. Update: Packages for 2008.0 are being provided due to extended support for Corporate products. Affected: 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0796 1021508 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1 1021709 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021709.1-1 1021988 http://www.securitytracker.com/id?1021988 20090415 XSS with mod_perl perl_status utility http://www.securityfocus.com/archive/1/502709/100/0/threaded 34383 http://www.securityfocus.com/bid/34383 34597 http://secunia.com/advisories/34597 ADV-2009-0943 http://www.vupen.com/english/advisories/2009/0943 APPLE-SA-2010-11-10-1 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html MDVSA-2009:091 http://www.mandriva.com/security/advisories?name=MDVSA-2009:091 [modperl-cvs] 20090401 svn commit: r761081 - in /perl/modperl/branches/1.x: Changes lib/Apache/Status.pm http://www.gossamer-threads.com/lists/modperl/modperl-cvs/99477#99477 [modperl] 20090401 [SECURITY] [CVE-2009-0796] Vulnerability found in Apache::Status and Apache2::Status http://www.gossamer-threads.com/lists/modperl/modperl/99475#99475 http://support.apple.com/kb/HT4435 http://svn.apache.org/viewvc/perl/modperl/branches/1.x/lib/Apache/Status.pm?r1=177851&r2=761081&pathrev=761081&diff_format=h http://svn.apache.org/viewvc?view=rev&revision=761081 https://bugzilla.redhat.com/show_bug.cgi?id=494402 https://launchpad.net/bugs/cve/2009-0796 oval:org.mitre.oval:def:8488 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8488
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.