Test ID:	1.3.6.1.4.1.25623.1.0.54895
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200503-30 (Mozilla)
Summary:	The remote host is missing updates announced in;advisory GLSA 200503-30.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200503-30. Vulnerability Insight: The Mozilla Suite is vulnerable to multiple issues ranging from the remote execution of arbitrary code to various issues allowing to trick the user into trusting fake web sites or interacting with privileged content. Solution: All Mozilla Suite users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-client/mozilla-1.7.6' All Mozilla Suite binary users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-client/mozilla-bin-1.7.6' CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1156 http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml http://secunia.com/multiple_browsers_window_injection_vulnerability_test/ http://secunia.com/secunia_research/2004-13/advisory/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100045 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10117 http://www.redhat.com/support/errata/RHSA-2005-176.html http://www.redhat.com/support/errata/RHSA-2005-384.html http://secunia.com/advisories/13129/ Common Vulnerability Exposure (CVE) ID: CVE-2005-0230 BugTraq ID: 12468 http://www.securityfocus.com/bid/12468 Bugtraq: 20050207 Firedragging [Firefox 1.0] (Google Search) http://marc.info/?l=bugtraq&m=110780995232064&w=2 http://www.mikx.de/firedragging/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100033 http://secunia.com/advisories/19823 SuSE Security Announcement: SUSE-SA:2006:022 (Google Search) http://www.novell.com/linux/security/advisories/2006_04_25.html Common Vulnerability Exposure (CVE) ID: CVE-2005-0231 Bugtraq: 20050207 Firetabbing [Firefox 1.0] (Google Search) http://marc.info/?l=bugtraq&m=110781134617144&w=2 http://www.mikx.de/firetabbing/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100032 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10079 SuSE Security Announcement: SUSE-SA:2005:016 (Google Search) http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html XForce ISS Database: mozilla-firefox-tab-gain-access(19264) https://exchange.xforce.ibmcloud.com/vulnerabilities/19264 Common Vulnerability Exposure (CVE) ID: CVE-2005-0232 Bugtraq: 20050207 Fireflashing [Firefox 1.0] (Google Search) http://marc.info/?l=bugtraq&m=110781055630856&w=2 http://www.mikx.de/fireflashing/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10967 http://www.redhat.com/support/errata/RHSA-2005-323.html XForce ISS Database: mozilla-firefox-aboutconfig-modify(19266) https://exchange.xforce.ibmcloud.com/vulnerabilities/19266 Common Vulnerability Exposure (CVE) ID: CVE-2005-0233 12461 http://www.securityfocus.com/bid/12461 20050206 state of homograph attacks http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html 20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. http://marc.info/?l=bugtraq&m=110782704923280&w=2 GLSA-200503-10 GLSA-200503-30 RHSA-2005:176 RHSA-2005:384 SUSE-SA:2005:016 http://www.mozilla.org/security/announce/mfsa2005-29.html http://www.shmoo.com/idn http://www.shmoo.com/idn/homograph.txt multiple-browsers-idn-spoof(19236) https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 oval:org.mitre.oval:def:100029 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029 oval:org.mitre.oval:def:11229 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229 Common Vulnerability Exposure (CVE) ID: CVE-2005-0255 BugTraq ID: 12659 http://www.securityfocus.com/bid/12659 http://www.idefense.com/application/poi/display?id=200&type=vulnerabilities https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100040 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9111 http://www.redhat.com/support/errata/RHSA-2005-277.html http://www.redhat.com/support/errata/RHSA-2005-337.html Common Vulnerability Exposure (CVE) ID: CVE-2005-0399 12881 http://www.securityfocus.com/bid/12881 14654 http://secunia.com/advisories/14654 15495 http://www.securityfocus.com/bid/15495 19823 20050323 Mozilla Foundation GIF Overflow http://xforce.iss.net/xforce/alerts/id/191 ADV-2005-0296 http://www.vupen.com/english/advisories/2005/0296 P-160 http://www.ciac.org/ciac/bulletins/p-160.shtml RHSA-2005:323 RHSA-2005:335 http://www.redhat.com/support/errata/RHSA-2005-335.html RHSA-2005:336 http://www.redhat.com/support/errata/RHSA-2005-336.html RHSA-2005:337 SCOSA-2005.49 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt SUSE-SA:2006:022 VU#557948 http://www.kb.cert.org/vuls/id/557948 gif-extension-overflow(19269) https://exchange.xforce.ibmcloud.com/vulnerabilities/19269 http://www.mozilla.org/security/announce/mfsa2005-30.html https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877 oval:org.mitre.oval:def:100028 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100028 oval:org.mitre.oval:def:11377 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11377 Common Vulnerability Exposure (CVE) ID: CVE-2005-0401 12885 http://www.securityfocus.com/bid/12885 20050324 Firescrolling 2 [Firefox 1.0.1] http://marc.info/?l=bugtraq&m=111168413007891&w=2 http://mikx.de/firescrolling2/ http://www.mozilla.org/security/announce/mfsa2005-32.html oval:org.mitre.oval:def:100026 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100026 oval:org.mitre.oval:def:9650 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9650 Common Vulnerability Exposure (CVE) ID: CVE-2005-0527 Bugtraq: 20050225 Firescrolling [Firefox 1.0] (Google Search) http://marc.info/?l=bugtraq&m=110935267500395&w=2 http://www.mikx.de/?p=11 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100031 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11772 http://securitytracker.com/id?1013301 Common Vulnerability Exposure (CVE) ID: CVE-2005-0578 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10954 Common Vulnerability Exposure (CVE) ID: CVE-2005-0584 http://www.mozilla.org/security/announce/mfsa2005-24.html https://bugzilla.mozilla.org/show_bug.cgi?id=277574 oval:org.mitre.oval:def:100034 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100034 oval:org.mitre.oval:def:11191 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11191 Common Vulnerability Exposure (CVE) ID: CVE-2005-0585 13599 http://secunia.com/advisories/13599 http://secunia.com/secunia_research/2004-15/advisory/ http://www.mozilla.org/security/announce/mfsa2005-23.html oval:org.mitre.oval:def:100035 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100035 oval:org.mitre.oval:def:9924 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9924 Common Vulnerability Exposure (CVE) ID: CVE-2005-0588 12659 http://www.mozilla.org/security/announce/mfsa2005-20.html https://bugzilla.mozilla.org/show_bug.cgi?id=271209 oval:org.mitre.oval:def:100038 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100038 oval:org.mitre.oval:def:10682 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10682 Common Vulnerability Exposure (CVE) ID: CVE-2005-0590 http://www.mozilla.org/security/announce/mfsa2005-17.html https://bugzilla.mozilla.org/show_bug.cgi?id=268059 oval:org.mitre.oval:def:100041 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100041 oval:org.mitre.oval:def:10010 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10010 Common Vulnerability Exposure (CVE) ID: CVE-2005-0591 12234 http://www.securityfocus.com/bid/12234 13786 http://secunia.com/advisories/13786 20050111 Firespoofing [Firefox 1.0] http://marc.info/?l=bugtraq&m=110547286002188&w=2 http://www.mikx.de/firespoofing/ http://www.mikx.de/index.php?p=7 http://www.mozilla.org/security/announce/mfsa2005-16.html https://bugzilla.mozilla.org/show_bug.cgi?id=260560 oval:org.mitre.oval:def:100042 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100042 oval:org.mitre.oval:def:10039 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10039 web-browser-modal-spoofing(18864) https://exchange.xforce.ibmcloud.com/vulnerabilities/18864 Common Vulnerability Exposure (CVE) ID: CVE-2005-0592 http://www.mozilla.org/security/announce/mfsa2005-15.html https://bugzilla.mozilla.org/show_bug.cgi?id=241440 oval:org.mitre.oval:def:100043 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100043 oval:org.mitre.oval:def:10606 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10606 Common Vulnerability Exposure (CVE) ID: CVE-2005-0593 http://www.mozilla.org/security/announce/mfsa2005-14.html https://bugzilla.mozilla.org/show_bug.cgi?id=258048 https://bugzilla.mozilla.org/show_bug.cgi?id=268483 https://bugzilla.mozilla.org/show_bug.cgi?id=276720 https://bugzilla.mozilla.org/show_bug.cgi?id=277564 oval:org.mitre.oval:def:100044 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100044 oval:org.mitre.oval:def:9533 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9533
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.