Test ID:	1.3.6.1.4.1.25623.1.0.54365
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: firefox
Summary:	FreeBSD Ports: firefox
Description:	The remote host is missing an update to the system as announced in the referenced advisory. The following packages are affected: firefox linux-firefox mozilla linux-mozilla linux-mozilla-devel netscape7 de-linux-mozillafirebird el-linux-mozillafirebird ja-linux-mozillafirebird-gtk1 ja-mozillafirebird-gtk2 linux-mozillafirebird ru-linux-mozillafirebird zhCN-linux-mozillafirebird zhTW-linux-mozillafirebird de-linux-netscape de-netscape7 fr-linux-netscape fr-netscape7 ja-linux-netscape ja-netscape7 linux-netscape linux-phoenix mozilla+ipv6 mozilla-embedded mozilla-firebird mozilla-gtk1 mozilla-gtk2 mozilla-gtk mozilla-thunderbird phoenix pt_BR-netscape7 CVE-2005-1937 A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2004-0718. Solution: Update your system with the appropriate patches or software upgrades. http://www.mozilla.org/projects/security/known-vulnerabilities.html http://www.mozilla.org/security/announce/mfsa2005-45.html http://www.mozilla.org/security/announce/mfsa2005-46.html http://www.mozilla.org/security/announce/mfsa2005-47.html http://www.mozilla.org/security/announce/mfsa2005-48.html http://www.mozilla.org/security/announce/mfsa2005-49.html http://www.mozilla.org/security/announce/mfsa2005-50.html http://www.mozilla.org/security/announce/mfsa2005-51.html http://www.mozilla.org/security/announce/mfsa2005-52.html http://www.mozilla.org/security/announce/mfsa2005-53.html http://www.mozilla.org/security/announce/mfsa2005-54.html http://www.mozilla.org/security/announce/mfsa2005-55.html http://www.mozilla.org/security/announce/mfsa2005-56.html http://www.vuxml.org/freebsd/5d72701a-f601-11d9-bcd1-02061b08fc24.html
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1937 http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/ Debian Security Information: DSA-777 (Google Search) http://www.debian.org/security/2005/dsa-777 Debian Security Information: DSA-810 (Google Search) http://www.debian.org/security/2005/dsa-810 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202 http://www.redhat.com/support/errata/RHSA-2005-586.html http://www.redhat.com/support/errata/RHSA-2005-587.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-101952-1 SuSE Security Announcement: SUSE-SA:2005:045 (Google Search) http://www.novell.com/linux/security/advisories/2005_45_mozilla.html SuSE Security Announcement: SUSE-SR:2005:018 (Google Search) http://www.novell.com/linux/security/advisories/2005_18_sr.html BugTraq ID: 14242 http://www.securityfocus.com/bid/14242 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10633 http://www.vupen.com/english/advisories/2005/1075 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:637 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:759 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100007 http://secunia.com/advisories/15601 Common Vulnerability Exposure (CVE) ID: CVE-2005-2260 http://www.networksecurity.fi/advisories/netscape-multiple-issues.html http://bugzilla.mozilla.org/show_bug.cgi?id=289940 Computer Incident Advisory Center Bulletin: P-252 http://www.ciac.org/ciac/bulletins/p-252.shtml http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10132 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100013 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1226 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:742 http://secunia.com/advisories/16043 http://secunia.com/advisories/16044 http://secunia.com/advisories/16059 Common Vulnerability Exposure (CVE) ID: CVE-2005-2261 https://bugzilla.mozilla.org/show_bug.cgi?id=292591 https://bugzilla.mozilla.org/show_bug.cgi?id=292589 http://www.redhat.com/support/errata/RHSA-2005-601.html SuSE Security Announcement: SUSE-SA:2006:022 (Google Search) http://www.novell.com/linux/security/advisories/2006_04_25.html SuSE Security Announcement: SUSE-SA:2006:004 (Google Search) http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10947 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100012 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1348 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:808 http://secunia.com/advisories/19823 Common Vulnerability Exposure (CVE) ID: CVE-2005-2262 http://www.mikx.de/firewalling/ http://www.securiteam.com/securitynews/5ZP0E0UGAK.html http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11097 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100011 Common Vulnerability Exposure (CVE) ID: CVE-2005-2263 https://bugzilla.mozilla.org/show_bug.cgi?id=293331 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11629 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100010 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100016 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1281 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1311 Common Vulnerability Exposure (CVE) ID: CVE-2005-2264 https://bugzilla.mozilla.org/show_bug.cgi?id=294074 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9887 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100009 Common Vulnerability Exposure (CVE) ID: CVE-2005-2265 https://bugzilla.mozilla.org/show_bug.cgi?id=295854 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10397 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100008 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:417 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:781 Common Vulnerability Exposure (CVE) ID: CVE-2005-2266 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10712 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100107 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1415 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:773 http://secunia.com/advisories/15549 http://secunia.com/advisories/15551 http://secunia.com/advisories/15553 XForce ISS Database: mozilla-frame-topfocus-xss(21332) http://xforce.iss.net/xforce/xfdb/21332 Common Vulnerability Exposure (CVE) ID: CVE-2005-2267 https://bugzilla.mozilla.org/show_bug.cgi?id=298255 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11334 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100006 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1073 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1172 http://securitytracker.com/id?1014469 Common Vulnerability Exposure (CVE) ID: CVE-2005-2268 http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/ http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10517 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1268 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1313 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100005 http://secunia.com/advisories/15489 Common Vulnerability Exposure (CVE) ID: CVE-2005-2269 https://bugzilla.mozilla.org/show_bug.cgi?id=298892 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9777 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100004 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1258 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:729 Common Vulnerability Exposure (CVE) ID: CVE-2005-2270 https://bugzilla.mozilla.org/show_bug.cgi?id=294795 https://bugzilla.mozilla.org/show_bug.cgi?id=294799 https://bugzilla.mozilla.org/show_bug.cgi?id=295011 https://bugzilla.mozilla.org/show_bug.cgi?id=296397 CERT/CC vulnerability note: VU#652366 http://www.kb.cert.org/vuls/id/652366 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11751 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100003 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:550 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:817 http://securitytracker.com/id?1014470
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: