Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.122554
Category:Oracle Linux Local Security Checks
Title:Oracle: Security Advisory (ELSA-2008-0879)
Summary:The remote host is missing an update for the 'devhelp, firefox, nss, xulrunner, yelp' package(s) announced via the ELSA-2008-0879 advisory.
Description:Summary:
The remote host is missing an update for the 'devhelp, firefox, nss, xulrunner, yelp' package(s) announced via the ELSA-2008-0879 advisory.

Vulnerability Insight:
devhelp:

[0.12-19]
- Rebuild against xulrunner

firefox:

[3.0.2-3.0.1.el5]
- Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html
- Removed the corresponding files of Red Hat.
- Added patch oracle-firefox-branding.patch
- Update firstrun URL

[3.0.2-3]
- Update to Firefox 3.0.2 build 6

[3.0.2-2]
- Update to Firefox 3.0.2 build 4

[3.0.2-1]
- Update to Firefox 3.0.2

[3.0.1-2]
- Fixed #447535 - RHEL 5.2 beta / upstream Firefox 3 beta 5
autoConfig broken
- Fixed #445304 - HTML/index.html always redirects to en-US/index.html
parallel compiles and -debuginfo packages

nss:

[3.12.1.1-1]
- Update to NSS_3_12_1_RC2

[3.12.1.0-1]
- Update to NSS_3_12_1_RC1

xulrunner:

[1.9.0.2-5.0.1]
- Added xulrunner-oracle-default-prefs.js
- Remove its corresponding of Red Hat.

[1.9.0.2-5]
- Update to 1.9.0.2 build 6

[1.9.0.2-4]
- Fixed firefox dependency (#445391)

[1.9.0.2-3]
- Update to 1.9.0.2 build 4

[1.9.0.2-2]
- Fixed gecko version

[1.9.0.2-1]
- Update to 1.9.0.2

[1.9.0.1-2]
- Updated provided gecko version

yelp:

[2.16.0-21]
- rebuild against xulrunner

Affected Software/OS:
'devhelp, firefox, nss, xulrunner, yelp' package(s) on Oracle Linux 5.

Solution:
Please install the updated package(s).

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2008-3837
1020922
http://www.securitytracker.com/id?1020922
256408
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
31346
http://www.securityfocus.com/bid/31346
31984
http://secunia.com/advisories/31984
31985
http://secunia.com/advisories/31985
31987
http://secunia.com/advisories/31987
32010
http://secunia.com/advisories/32010
32011
http://secunia.com/advisories/32011
32012
http://secunia.com/advisories/32012
32042
http://secunia.com/advisories/32042
32044
http://secunia.com/advisories/32044
32089
http://secunia.com/advisories/32089
32095
http://secunia.com/advisories/32095
32096
http://secunia.com/advisories/32096
32144
http://secunia.com/advisories/32144
32185
http://secunia.com/advisories/32185
32196
http://secunia.com/advisories/32196
32845
http://secunia.com/advisories/32845
33433
http://secunia.com/advisories/33433
34501
http://secunia.com/advisories/34501
ADV-2008-2661
http://www.vupen.com/english/advisories/2008/2661
ADV-2009-0977
http://www.vupen.com/english/advisories/2009/0977
DSA-1649
http://www.debian.org/security/2008/dsa-1649
DSA-1669
http://www.debian.org/security/2008/dsa-1669
DSA-1697
http://www.debian.org/security/2009/dsa-1697
FEDORA-2008-8401
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html
FEDORA-2008-8425
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html
FEDORA-2008-8429
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html
MDVSA-2008:205
http://www.mandriva.com/security/advisories?name=MDVSA-2008:205
RHSA-2008:0879
http://www.redhat.com/support/errata/RHSA-2008-0879.html
RHSA-2008:0882
http://www.redhat.com/support/errata/RHSA-2008-0882.html
SSA:2008-269-01
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232
SSA:2008-269-02
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422
SUSE-SA:2008:050
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html
USN-645-1
http://www.ubuntu.com/usn/usn-645-1
USN-645-2
http://www.ubuntu.com/usn/usn-645-2
firefox-draganddrop-weak-security(45348)
https://exchange.xforce.ibmcloud.com/vulnerabilities/45348
http://download.novell.com/Download?buildid=WZXONb-tqBw~
http://www.mozilla.org/security/announce/2008/mfsa2008-40.html
https://bugzilla.mozilla.org/show_bug.cgi?id=329385
oval:org.mitre.oval:def:9950
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9950
Common Vulnerability Exposure (CVE) ID: CVE-2008-4058
1020915
http://www.securitytracker.com/id?1020915
32007
http://secunia.com/advisories/32007
32025
http://secunia.com/advisories/32025
32082
http://secunia.com/advisories/32082
32092
http://secunia.com/advisories/32092
33434
http://secunia.com/advisories/33434
DSA-1696
http://www.debian.org/security/2009/dsa-1696
MDVSA-2008:206
http://www.mandriva.com/security/advisories?name=MDVSA-2008:206
RHSA-2008:0908
http://www.redhat.com/support/errata/RHSA-2008-0908.html
SSA:2008-270-01
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123
USN-647-1
http://www.ubuntu.com/usn/usn-647-1
firefox3-xpcnativewrappers-code-execution(45349)
https://exchange.xforce.ibmcloud.com/vulnerabilities/45349
http://www.mozilla.org/security/announce/2008/mfsa2008-41.html
https://bugzilla.mozilla.org/show_bug.cgi?id=444075
https://bugzilla.mozilla.org/show_bug.cgi?id=444077
oval:org.mitre.oval:def:9679
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9679
Common Vulnerability Exposure (CVE) ID: CVE-2008-4060
firefox-xslt-code-execution(45353)
https://exchange.xforce.ibmcloud.com/vulnerabilities/45353
https://bugzilla.mozilla.org/show_bug.cgi?id=448548
https://bugzilla.mozilla.org/show_bug.cgi?id=451037
oval:org.mitre.oval:def:11607
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11607
Common Vulnerability Exposure (CVE) ID: CVE-2008-4061
1020916
http://www.securitytracker.com/id?1020916
http://www.mozilla.org/security/announce/2008/mfsa2008-42.html
https://bugzilla.mozilla.org/show_bug.cgi?id=443089
multiple-mozilla-layout-code-execution(45351)
https://exchange.xforce.ibmcloud.com/vulnerabilities/45351
oval:org.mitre.oval:def:10794
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10794
Common Vulnerability Exposure (CVE) ID: CVE-2008-4062
https://bugzilla.mozilla.org/show_bug.cgi?id=367736
https://bugzilla.mozilla.org/show_bug.cgi?id=444608
https://bugzilla.mozilla.org/show_bug.cgi?id=445229
multiple-mozilla-javascript-code-execution(45355)
https://exchange.xforce.ibmcloud.com/vulnerabilities/45355
oval:org.mitre.oval:def:10206
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10206
Common Vulnerability Exposure (CVE) ID: CVE-2008-4063
https://bugzilla.mozilla.org/show_bug.cgi?id=413048
https://bugzilla.mozilla.org/show_bug.cgi?id=433758
https://bugzilla.mozilla.org/show_bug.cgi?id=444452
mozilla-firefox-layout-code-execution(45354)
https://exchange.xforce.ibmcloud.com/vulnerabilities/45354
oval:org.mitre.oval:def:11151
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11151
Common Vulnerability Exposure (CVE) ID: CVE-2008-4064
firefox-imagegraphics-code-execution(45357)
https://exchange.xforce.ibmcloud.com/vulnerabilities/45357
https://bugzilla.mozilla.org/show_bug.cgi?id=441368
https://bugzilla.mozilla.org/show_bug.cgi?id=441995
https://bugzilla.mozilla.org/show_bug.cgi?id=443693
oval:org.mitre.oval:def:11743
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11743
Common Vulnerability Exposure (CVE) ID: CVE-2008-4065
1020920
http://www.securitytracker.com/id?1020920
firefox-bom-security-bypass(45356)
https://exchange.xforce.ibmcloud.com/vulnerabilities/45356
http://www.mozilla.org/security/announce/2008/mfsa2008-43.html
https://bugzilla.mozilla.org/show_bug.cgi?id=430740
oval:org.mitre.oval:def:11383
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11383
Common Vulnerability Exposure (CVE) ID: CVE-2008-4067
1020921
http://www.securitytracker.com/id?1020921
http://www.0x000000.com/?i=422
http://www.mozilla.org/security/announce/2008/mfsa2008-44.html
https://bugzilla.mozilla.org/show_bug.cgi?id=380994
https://bugzilla.mozilla.org/show_bug.cgi?id=394075
mozilla-protocol-directory-traversal(45359)
https://exchange.xforce.ibmcloud.com/vulnerabilities/45359
oval:org.mitre.oval:def:10770
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10770
Common Vulnerability Exposure (CVE) ID: CVE-2008-4068
mozilla-resourceprotocol-info-disclosure(45360)
https://exchange.xforce.ibmcloud.com/vulnerabilities/45360
oval:org.mitre.oval:def:11471
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11471
CopyrightCopyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.