Test ID:	1.3.6.1.4.1.25623.1.0.122612
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2008-0103)
Summary:	The remote host is missing an update for the 'firefox' package(s) announced via the ELSA-2008-0103 advisory.
Description:	Summary: The remote host is missing an update for the 'firefox' package(s) announced via the ELSA-2008-0103 advisory. Vulnerability Insight: [1.5.0.12-9.0.1] - Added Oracle specific links into default bookmarks [1.5.0.12-9] - Update to latest snapshot of Mozilla 1.8.0 branch - Added a patch with backported fixes from 1.8.1.12 Affected Software/OS: 'firefox' package(s) on Oracle Linux 4, Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0412 BugTraq ID: 27683 http://www.securityfocus.com/bid/27683 Bugtraq: 20080209 rPSA-2008-0051-1 firefox (Google Search) http://www.securityfocus.com/archive/1/487826/100/0/threaded Bugtraq: 20080212 FLEA-2008-0001-1 firefox (Google Search) http://www.securityfocus.com/archive/1/488002/100/0/threaded Bugtraq: 20080229 rPSA-2008-0093-1 thunderbird (Google Search) http://www.securityfocus.com/archive/1/488971/100/0/threaded Debian Security Information: DSA-1484 (Google Search) http://www.debian.org/security/2008/dsa-1484 Debian Security Information: DSA-1485 (Google Search) http://www.debian.org/security/2008/dsa-1485 Debian Security Information: DSA-1489 (Google Search) http://www.debian.org/security/2008/dsa-1489 Debian Security Information: DSA-1506 (Google Search) http://www.debian.org/security/2008/dsa-1506 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 http://www.mandriva.com/security/advisories?name=MDVSA-2008:062 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10573 http://www.redhat.com/support/errata/RHSA-2008-0103.html http://www.redhat.com/support/errata/RHSA-2008-0104.html http://www.redhat.com/support/errata/RHSA-2008-0105.html http://www.securitytracker.com/id?1019320 http://secunia.com/advisories/28754 http://secunia.com/advisories/28758 http://secunia.com/advisories/28766 http://secunia.com/advisories/28808 http://secunia.com/advisories/28815 http://secunia.com/advisories/28818 http://secunia.com/advisories/28839 http://secunia.com/advisories/28864 http://secunia.com/advisories/28865 http://secunia.com/advisories/28877 http://secunia.com/advisories/28879 http://secunia.com/advisories/28924 http://secunia.com/advisories/28939 http://secunia.com/advisories/28958 http://secunia.com/advisories/29049 http://secunia.com/advisories/29086 http://secunia.com/advisories/29098 http://secunia.com/advisories/29164 http://secunia.com/advisories/29167 http://secunia.com/advisories/29211 http://secunia.com/advisories/29567 http://secunia.com/advisories/30327 http://secunia.com/advisories/30620 http://secunia.com/advisories/31043 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 SuSE Security Announcement: SUSE-SA:2008:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html http://www.ubuntu.com/usn/usn-576-1 http://www.ubuntu.com/usn/usn-582-1 http://www.ubuntu.com/usn/usn-582-2 http://www.vupen.com/english/advisories/2008/0453/references http://www.vupen.com/english/advisories/2008/0454/references http://www.vupen.com/english/advisories/2008/0627/references http://www.vupen.com/english/advisories/2008/1793/references http://www.vupen.com/english/advisories/2008/2091/references Common Vulnerability Exposure (CVE) ID: CVE-2008-0413 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10385 http://www.securitytracker.com/id?1019321 Common Vulnerability Exposure (CVE) ID: CVE-2008-0415 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9897 http://www.securitytracker.com/id?1019327 Common Vulnerability Exposure (CVE) ID: CVE-2008-0416 238492 239546 28839 28864 28865 28879 29303 http://www.securityfocus.com/bid/29303 29541 http://secunia.com/advisories/29541 30327 30620 31043 ADV-2008-1793 ADV-2008-2091 DSA-1484 DSA-1485 DSA-1489 GLSA-200805-18 JVN#21563357 http://jvn.jp/en/jp/JVN21563357/index.html JVNDB-2008-000021 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html TA08-087A http://www.us-cert.gov/cas/techalerts/TA08-087A.html TLSA-2008-9 http://www.turbolinux.com/security/2008/TLSA-2008-9.txt USN-576-1 https://usn.ubuntu.com/576-1/ USN-592-1 http://www.ubuntu.com/usn/usn-592-1 firefox-character-encoding-xss(40488) https://exchange.xforce.ibmcloud.com/vulnerabilities/40488 http://www.mozilla.org/security/announce/2008/mfsa2008-13.html https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161 Common Vulnerability Exposure (CVE) ID: CVE-2008-0417 1019334 http://www.securitytracker.com/id?1019334 20080209 rPSA-2008-0051-1 firefox 20080212 FLEA-2008-0001-1 firefox 27683 28766 28818 28877 28924 28939 28958 29086 29567 ADV-2008-0453 ADV-2008-0627 DSA-1506 FEDORA-2008-1435 FEDORA-2008-1459 FEDORA-2008-1535 MDVSA-2008:048 RHSA-2008:0103 RHSA-2008:0104 SUSE-SA:2008:008 http://browser.netscape.com/releasenotes/ http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html http://wiki.rpath.com/Advisories:rPSA-2008-0051 http://www.mozilla.org/security/announce/2008/mfsa2008-04.html https://bugzilla.mozilla.org/show_bug.cgi?id=394610 oval:org.mitre.oval:def:11154 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11154 Common Vulnerability Exposure (CVE) ID: CVE-2008-0418 BugTraq ID: 27406 http://www.securityfocus.com/bid/27406 CERT/CC vulnerability note: VU#309608 http://www.kb.cert.org/vuls/id/309608 http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10705 http://www.securitytracker.com/id?1019329 http://secunia.com/advisories/28622/ http://www.vupen.com/english/advisories/2008/0263 Common Vulnerability Exposure (CVE) ID: CVE-2008-0419 CERT/CC vulnerability note: VU#879056 http://www.kb.cert.org/vuls/id/879056 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11652 http://www.securitytracker.com/id?1019328 Common Vulnerability Exposure (CVE) ID: CVE-2008-0420 BugTraq ID: 27826 http://www.securityfocus.com/bid/27826 Bugtraq: 20080216 [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service (Google Search) http://www.securityfocus.com/archive/1/488264/100/0/threaded https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10119 http://securitytracker.com/id?1019434 XForce ISS Database: firefox-bmp-dos(40606) https://exchange.xforce.ibmcloud.com/vulnerabilities/40606 XForce ISS Database: firefox-bmp-information-disclosure(40491) https://exchange.xforce.ibmcloud.com/vulnerabilities/40491 Common Vulnerability Exposure (CVE) ID: CVE-2008-0591 BugTraq ID: 24293 http://www.securityfocus.com/bid/24293 Bugtraq: 20070604 Assorted browser vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/470446/100/0/threaded http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html http://lcamtuf.coredump.cx/ffclick2/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10900 http://www.securitytracker.com/id?1019339 http://securityreason.com/securityalert/2781 Common Vulnerability Exposure (CVE) ID: CVE-2008-0592 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9972 http://www.securitytracker.com/id?1019340 Common Vulnerability Exposure (CVE) ID: CVE-2008-0593 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10075 http://www.securitytracker.com/id?1019341
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.