ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2014.0349
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2014-0349)
Resumen:	The remote host is missing an update for the 'bugzilla' package(s) announced via the MGASA-2014-0349 advisory.
Descripción:	Summary: The remote host is missing an update for the 'bugzilla' package(s) announced via the MGASA-2014-0349 advisory. Vulnerability Insight: Updated bugzilla packages fix security vulnerabilities: Adobe does not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against Bugzilla's JSONP endpoint, possibly obtaining sensitive bug information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API (CVE-2014-1546). Affected Software/OS: 'bugzilla' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1546 Bugtraq: 20140724 Security advisory for Bugzilla 4.5.5, 4.4.5, 4.2.10, and 4.0.14 (Google Search) http://www.securityfocus.com/archive/1/532895 http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136369.html http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136217.html http://www.mandriva.com/security/advisories?name=MDVSA-2014:169 http://www.securitytracker.com/id/1030648
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.