Test ID:	1.3.6.1.4.1.25623.1.0.51923
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2005:323
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2005:323. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Numerous bugs have been fixed in Mozilla. For complete details, please visit the referenced security advisory. Users of Mozilla are advised to upgrade to this updated package which contains Mozilla version 1.4.4 and additional backported patches to correct these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2005-323.html Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0906 BugTraq ID: 11192 http://www.securityfocus.com/bid/11192 CERT/CC vulnerability note: VU#653160 http://www.kb.cert.org/vuls/id/653160 http://security.gentoo.org/glsa/glsa-200409-26.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11668 http://www.redhat.com/support/errata/RHSA-2005-323.html http://secunia.com/advisories/12526/ SuSE Security Announcement: SUSE-SA:2004:036 (Google Search) http://www.novell.com/linux/security/advisories/2004_36_mozilla.html XForce ISS Database: mozilla-insecure-file-permissions(17375) https://exchange.xforce.ibmcloud.com/vulnerabilities/17375 Common Vulnerability Exposure (CVE) ID: CVE-2004-1380 http://secunia.com/multiple_browsers_dialog_box_spoofing_test/ http://secunia.com/multiple_browsers_form_field_focus_test/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100050 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10211 http://www.redhat.com/support/errata/RHSA-2005-335.html http://secunia.com/advisories/12712 XForce ISS Database: web-browser-modal-spoofing(18864) https://exchange.xforce.ibmcloud.com/vulnerabilities/18864 Common Vulnerability Exposure (CVE) ID: CVE-2004-1613 BugTraq ID: 11439 http://www.securityfocus.com/bid/11439 Bugtraq: 20041018 Web browsers - a mini-farce (Google Search) http://marc.info/?l=bugtraq&m=109811406620511&w=2 http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html http://lcamtuf.coredump.cx/mangleme/gallery/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10227 http://securitytracker.com/id?1011810 XForce ISS Database: mozilla-html-tags-dos(17805) https://exchange.xforce.ibmcloud.com/vulnerabilities/17805 Common Vulnerability Exposure (CVE) ID: CVE-2005-0141 BugTraq ID: 12407 http://www.securityfocus.com/bid/12407 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100057 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10756 XForce ISS Database: mozilla-firefox-file-upload(19168) https://exchange.xforce.ibmcloud.com/vulnerabilities/19168 Common Vulnerability Exposure (CVE) ID: CVE-2005-0144 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100054 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11016 XForce ISS Database: mozilla-ssl-view-source-spoofing(19169) https://exchange.xforce.ibmcloud.com/vulnerabilities/19169 Common Vulnerability Exposure (CVE) ID: CVE-2005-0147 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100049 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9578 XForce ISS Database: mozilla-407-proxy-obtain-information(19174) https://exchange.xforce.ibmcloud.com/vulnerabilities/19174 Common Vulnerability Exposure (CVE) ID: CVE-2005-0149 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407 http://www.redhat.com/support/errata/RHSA-2005-094.html http://secunia.com/advisories/19823 SuSE Security Announcement: SUSE-SA:2006:022 (Google Search) http://www.novell.com/linux/security/advisories/2006_04_25.html XForce ISS Database: mozilla-cookie-policy-bypass(19172) https://exchange.xforce.ibmcloud.com/vulnerabilities/19172 Common Vulnerability Exposure (CVE) ID: CVE-2005-0232 Bugtraq: 20050207 Fireflashing [Firefox 1.0] (Google Search) http://marc.info/?l=bugtraq&m=110781055630856&w=2 http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml http://www.mikx.de/fireflashing/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10967 http://www.redhat.com/support/errata/RHSA-2005-176.html http://www.redhat.com/support/errata/RHSA-2005-384.html SuSE Security Announcement: SUSE-SA:2005:016 (Google Search) http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html XForce ISS Database: mozilla-firefox-aboutconfig-modify(19266) https://exchange.xforce.ibmcloud.com/vulnerabilities/19266 Common Vulnerability Exposure (CVE) ID: CVE-2005-0399 12881 http://www.securityfocus.com/bid/12881 14654 http://secunia.com/advisories/14654 15495 http://www.securityfocus.com/bid/15495 19823 20050323 Mozilla Foundation GIF Overflow http://xforce.iss.net/xforce/alerts/id/191 ADV-2005-0296 http://www.vupen.com/english/advisories/2005/0296 GLSA-200503-30 P-160 http://www.ciac.org/ciac/bulletins/p-160.shtml RHSA-2005:323 RHSA-2005:335 RHSA-2005:336 http://www.redhat.com/support/errata/RHSA-2005-336.html RHSA-2005:337 http://www.redhat.com/support/errata/RHSA-2005-337.html SCOSA-2005.49 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt SUSE-SA:2006:022 VU#557948 http://www.kb.cert.org/vuls/id/557948 gif-extension-overflow(19269) https://exchange.xforce.ibmcloud.com/vulnerabilities/19269 http://www.mozilla.org/security/announce/mfsa2005-30.html https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877 oval:org.mitre.oval:def:100028 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100028 oval:org.mitre.oval:def:11377 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11377 Common Vulnerability Exposure (CVE) ID: CVE-2004-1381 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053 XForce ISS Database: web-browser-inactive-info-disclosure(17789) https://exchange.xforce.ibmcloud.com/vulnerabilities/17789 Common Vulnerability Exposure (CVE) ID: CVE-2005-0527 Bugtraq: 20050225 Firescrolling [Firefox 1.0] (Google Search) http://marc.info/?l=bugtraq&m=110935267500395&w=2 http://www.mikx.de/?p=11 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100031 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11772 http://securitytracker.com/id?1013301
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.