ID de Prueba:	1.3.6.1.4.1.25623.1.0.800857
Categoría:	Denial of Service
Título:	Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability (Aug 2009) - Windows
Resumen:	Mozilla Firefox is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: Mozilla Firefox is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Error exists when application fails to handle long domain name in a response which leads remote 'SOCKS5' proxy servers into data stream corruption. Vulnerability Impact: Successful exploitation will let attacker to cause Denial of Service condition in an affected proxy server. Affected Software/OS: Firefox version before 3.0.12 or 3.5 before 3.5.2 on Windows. Solution: Upgrade to Firefox version 3.0.12/3.5.2. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2470 1022665 http://www.securitytracker.com/id?1022665 266148 http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 35925 http://www.securityfocus.com/bid/35925 36126 http://secunia.com/advisories/36126 ADV-2009-2142 http://www.vupen.com/english/advisories/2009/2142 ADV-2010-0650 http://www.vupen.com/english/advisories/2010/0650 FEDORA-2009-8279 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html FEDORA-2009-8288 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html RHSA-2010:0153 http://www.redhat.com/support/errata/RHSA-2010-0153.html RHSA-2010:0154 http://www.redhat.com/support/errata/RHSA-2010-0154.html firefox-socks5-dos(52252) https://exchange.xforce.ibmcloud.com/vulnerabilities/52252 http://www.mozilla.org/security/announce/2009/mfsa2009-38.html https://bugzilla.mozilla.org/show_bug.cgi?id=459524 oval:org.mitre.oval:def:10197 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.