ID de Prueba:	1.3.6.1.4.1.25623.1.0.66741
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 201001-08 (squirrelmail)
Resumen:	The remote host is missing updates announced in;advisory GLSA 201001-08.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 201001-08. Vulnerability Insight: Multiple vulnerabilities were found in SquirrelMail of which the worst results in remote code execution. Solution: All SquirrelMail users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=mail-client/squirrelmail-1.4.19' CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1381 20090521 [SECURITY] [DSA 1802-2] New squirrelmail packages correct incomplete fix http://www.securityfocus.com/archive/1/503718/100/0/threaded 35140 http://secunia.com/advisories/35140 DSA-1802 http://www.debian.org/security/2009/dsa-1802 FEDORA-2009-5350 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01202.html FEDORA-2009-5471 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01195.html MDVSA-2009:122 http://www.mandriva.com/security/advisories?name=MDVSA-2009:122 http://release.debian.org/proposed-updates/stable_diffs/squirrelmail_1.4.15-4+lenny2.debdiff Common Vulnerability Exposure (CVE) ID: CVE-2009-1578 http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html BugTraq ID: 34916 http://www.securityfocus.com/bid/34916 Debian Security Information: DSA-1802 (Google Search) https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:110 http://osvdb.org/60468 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11624 http://www.redhat.com/support/errata/RHSA-2009-1066.html http://secunia.com/advisories/35052 http://secunia.com/advisories/35073 http://secunia.com/advisories/35259 http://secunia.com/advisories/37415 http://secunia.com/advisories/40220 http://www.vupen.com/english/advisories/2009/1296 http://www.vupen.com/english/advisories/2009/3315 http://www.vupen.com/english/advisories/2010/1481 XForce ISS Database: squirrelmail-decryptheaders-xss(50460) https://exchange.xforce.ibmcloud.com/vulnerabilities/50460 XForce ISS Database: squirrelmail-phpself-xss(50459) https://exchange.xforce.ibmcloud.com/vulnerabilities/50459 Common Vulnerability Exposure (CVE) ID: CVE-2009-1579 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10986 XForce ISS Database: squirrelmail-mapypalias-code-execution(50461) https://exchange.xforce.ibmcloud.com/vulnerabilities/50461 Common Vulnerability Exposure (CVE) ID: CVE-2009-1580 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10107 XForce ISS Database: squirrelmail-baseuri-session-hijacking(50462) https://exchange.xforce.ibmcloud.com/vulnerabilities/50462 Common Vulnerability Exposure (CVE) ID: CVE-2009-1581 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10441 XForce ISS Database: squirrelmail-css-xss(50463) https://exchange.xforce.ibmcloud.com/vulnerabilities/50463
Copyright	Copyright (C) 2010 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.