Test ID:	1.3.6.1.4.1.25623.1.0.122572
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2008-0569)
Summary:	The remote host is missing an update for the 'devhelp, firefox, xulrunner, yelp' package(s) announced via the ELSA-2008-0569 advisory.
Description:	Summary: The remote host is missing an update for the 'devhelp, firefox, xulrunner, yelp' package(s) announced via the ELSA-2008-0569 advisory. Vulnerability Insight: devhelp: [0.12-17] - Rebuild against xulrunner firefox: [3.0-2.0.1.el5] - Replaced the RedHat prefs and bookmarks with Oracle prefs and bookmarks - Add patch oracle-firefox-branding.patch [3.0-2] - Fixed firstrun homepage issue [3.0-1] - Update to Firefox 3 Final xulrunner: [1.9-1.0.1.el5] - Added xulrunner-oracle-default-prefs.js [1.9-1] - Update to 1.9 final yelp: [2.16.0-19] - rebuild against xulrunner Affected Software/OS: 'devhelp, firefox, xulrunner, yelp' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2798 BugTraq ID: 30038 http://www.securityfocus.com/bid/30038 Bugtraq: 20080708 rPSA-2008-0216-1 firefox (Google Search) http://www.securityfocus.com/archive/1/494080/100/0/threaded Debian Security Information: DSA-1607 (Google Search) http://www.debian.org/security/2008/dsa-1607 Debian Security Information: DSA-1615 (Google Search) http://www.debian.org/security/2008/dsa-1615 Debian Security Information: DSA-1621 (Google Search) http://www.debian.org/security/2008/dsa-1621 Debian Security Information: DSA-1697 (Google Search) http://www.debian.org/security/2009/dsa-1697 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html http://security.gentoo.org/glsa/glsa-200808-03.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:136 http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10087 http://www.redhat.com/support/errata/RHSA-2008-0547.html http://www.redhat.com/support/errata/RHSA-2008-0549.html http://www.redhat.com/support/errata/RHSA-2008-0569.html RedHat Security Advisories: RHSA-2008:0616 http://rhn.redhat.com/errata/RHSA-2008-0616.html http://www.securitytracker.com/id?1020419 http://secunia.com/advisories/30878 http://secunia.com/advisories/30898 http://secunia.com/advisories/30903 http://secunia.com/advisories/30911 http://secunia.com/advisories/30915 http://secunia.com/advisories/30949 http://secunia.com/advisories/31005 http://secunia.com/advisories/31008 http://secunia.com/advisories/31021 http://secunia.com/advisories/31023 http://secunia.com/advisories/31069 http://secunia.com/advisories/31076 http://secunia.com/advisories/31183 http://secunia.com/advisories/31195 http://secunia.com/advisories/31220 http://secunia.com/advisories/31253 http://secunia.com/advisories/31286 http://secunia.com/advisories/31377 http://secunia.com/advisories/31403 http://secunia.com/advisories/33433 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484 SuSE Security Announcement: SUSE-SA:2008:034 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html http://www.ubuntu.com/usn/usn-619-1 http://www.ubuntu.com/usn/usn-629-1 http://www.vupen.com/english/advisories/2008/1993/references Common Vulnerability Exposure (CVE) ID: CVE-2008-2799 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10743 Common Vulnerability Exposure (CVE) ID: CVE-2008-2800 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9386 http://secunia.com/advisories/34501 http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 http://www.vupen.com/english/advisories/2009/0977 Common Vulnerability Exposure (CVE) ID: CVE-2008-2801 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11810 Common Vulnerability Exposure (CVE) ID: CVE-2008-2802 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11121 Common Vulnerability Exposure (CVE) ID: CVE-2008-2803 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10747 Common Vulnerability Exposure (CVE) ID: CVE-2008-2805 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10143 Common Vulnerability Exposure (CVE) ID: CVE-2008-2807 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9432 XForce ISS Database: firefox-propertiesfile-info-disclosure(50656) https://exchange.xforce.ibmcloud.com/vulnerabilities/50656 Common Vulnerability Exposure (CVE) ID: CVE-2008-2808 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9668 Common Vulnerability Exposure (CVE) ID: CVE-2008-2809 Bugtraq: 20071118 Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Google Search) http://www.securityfocus.com/archive/1/483929/100/100/threaded Bugtraq: 20071118 RE: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Google Search) http://www.securityfocus.com/archive/1/483960/100/100/threaded Bugtraq: 20071118 Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Google Search) http://www.securityfocus.com/archive/1/483937/100/100/threaded http://nils.toedtmann.net/pub/subjectAltName.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10205 http://securitytracker.com/id?1018979 http://securityreason.com/securityalert/3498 XForce ISS Database: mozilla-altnames-spoofing(43524) https://exchange.xforce.ibmcloud.com/vulnerabilities/43524 Common Vulnerability Exposure (CVE) ID: CVE-2008-2810 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9593 Common Vulnerability Exposure (CVE) ID: CVE-2008-2811 CERT/CC vulnerability note: VU#607267 http://www.kb.cert.org/vuls/id/607267 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9865
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.