Test ID:	1.3.6.1.4.1.25623.1.0.56587
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-271-1 (firefox)
Summary:	Ubuntu USN-271-1 (firefox)
Description:	The remote host is missing an update to firefox announced via advisory USN-271-1. A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) Ubuntu 5.10 (Breezy Badger) The following packages are affected: firefox mozilla-firefox For details on the issues addressed with the missing upate, please visit the referenced security advisories. Solution: The problem can be corrected by upgrading the affected package to version 1.0.8-0ubuntu4.10 (for Ubuntu 4.10), 1.0.8-0ubuntu5.04 (for Ubuntu 5.04), or 1.0.8-0ubuntu5.10 (for Ubuntu 5.10). After a standard system upgrade you need to restart Firefox to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-271-1 Risk factor : Critical
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-4134 http://marc.theaimsgroup.com/?l=full-disclosure&m=113405896025702&w=2 http://marc.theaimsgroup.com/?l=full-disclosure&m=113404911919629&w=2 http://www.mozilla.org/security/history-title.html http://www.networksecurity.fi/advisories/netscape-history.html Debian Security Information: DSA-1044 (Google Search) http://www.debian.org/security/2006/dsa-1044 Debian Security Information: DSA-1046 (Google Search) http://www.debian.org/security/2006/dsa-1046 Debian Security Information: DSA-1051 (Google Search) http://www.debian.org/security/2006/dsa-1051 http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html http://www.securityfocus.com/archive/1/archive/1/425978/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/425975/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml HPdes Security Advisory: HPSBUX02122 http://www.securityfocus.com/archive/1/archive/1/438730/100/0/threaded HPdes Security Advisory: SSRT061158 http://www.mandriva.com/security/advisories?name=MDKSA-2006:036 http://www.mandriva.com/security/advisories?name=MDKSA-2006:037 http://www.redhat.com/support/errata/RHSA-2006-0199.html http://www.redhat.com/support/errata/RHSA-2006-0200.html SCO Security Bulletin: SCOSA-2006.26 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt SGI Security Advisory: 20060201-01-U ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 http://www.ubuntulinux.org/support/documentation/usn/usn-275-1 http://www.ubuntulinux.org/support/documentation/usn/usn-271-1 BugTraq ID: 15773 http://www.securityfocus.com/bid/15773 BugTraq ID: 16476 http://www.securityfocus.com/bid/16476 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11382 http://www.vupen.com/english/advisories/2005/2805 http://www.vupen.com/english/advisories/2006/0413 http://www.vupen.com/english/advisories/2006/3391 http://www.osvdb.org/21533 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1619 http://securitytracker.com/id?1015328 http://secunia.com/advisories/17934 http://secunia.com/advisories/17944 http://secunia.com/advisories/17946 http://secunia.com/advisories/18700 http://secunia.com/advisories/18704 http://secunia.com/advisories/18708 http://secunia.com/advisories/18709 http://secunia.com/advisories/18705 http://secunia.com/advisories/18706 http://secunia.com/advisories/19230 http://secunia.com/advisories/19759 http://secunia.com/advisories/19852 http://secunia.com/advisories/19862 http://secunia.com/advisories/19863 http://secunia.com/advisories/19902 http://secunia.com/advisories/19941 http://secunia.com/advisories/19746 http://secunia.com/advisories/21033 http://secunia.com/advisories/21622 Common Vulnerability Exposure (CVE) ID: CVE-2006-0292 http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml HPdes Security Advisory: HPSBUX02156 http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded HPdes Security Advisory: SSRT061236 http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 http://www.redhat.com/support/errata/RHSA-2006-0330.html SuSE Security Announcement: SUSE-SA:2006:022 (Google Search) http://www.novell.com/linux/security/advisories/2006_04_25.html SuSE Security Announcement: SUSE-SA:2006:004 (Google Search) http://www.ubuntulinux.org/support/documentation/usn/usn-276-1 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10016 http://www.vupen.com/english/advisories/2006/3749 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:670 http://securitytracker.com/id?1015570 http://secunia.com/advisories/18703 http://secunia.com/advisories/19821 http://secunia.com/advisories/19823 http://secunia.com/advisories/19950 http://secunia.com/advisories/19780 http://secunia.com/advisories/20051 http://secunia.com/advisories/22065 XForce ISS Database: mozilla-javascript-memory-corruption(24430) http://xforce.iss.net/xforce/xfdb/24430 Common Vulnerability Exposure (CVE) ID: CVE-2006-0296 Cert/CC Advisory: TA06-038A http://www.us-cert.gov/cas/techalerts/TA06-038A.html CERT/CC vulnerability note: VU#592425 http://www.kb.cert.org/vuls/id/592425 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11803 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1493 XForce ISS Database: mozilla-xuldocument-command-execution(24434) http://xforce.iss.net/xforce/xfdb/24434 Common Vulnerability Exposure (CVE) ID: CVE-2006-0749 Bugtraq: 20060417 ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/431126/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-06-009.html http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html http://www.securityfocus.com/archive/1/archive/1/436296/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/436338/100/0/threaded HPdes Security Advisory: HPSBTU02118 http://www.securityfocus.com/archive/1/archive/1/434524/100/0/threaded HPdes Security Advisory: SSRT061145 http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 http://www.redhat.com/support/errata/RHSA-2006-0328.html http://www.redhat.com/support/errata/RHSA-2006-0329.html SGI Security Advisory: 20060404-01-U ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc SuSE Security Announcement: SUSE-SA:2006:021 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html Cert/CC Advisory: TA06-107A http://www.us-cert.gov/cas/techalerts/TA06-107A.html CERT/CC vulnerability note: VU#736934 http://www.kb.cert.org/vuls/id/736934 BugTraq ID: 17516 http://www.securityfocus.com/bid/17516 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11704 http://www.vupen.com/english/advisories/2006/1356 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1848 http://secunia.com/advisories/19631 http://secunia.com/advisories/19794 http://secunia.com/advisories/19811 http://secunia.com/advisories/19714 http://secunia.com/advisories/19721 http://secunia.com/advisories/19696 http://secunia.com/advisories/19729 http://securityreason.com/securityalert/729 XForce ISS Database: mozilla-nshtmlcontentsink-memory-corruption(25819) http://xforce.iss.net/xforce/xfdb/25819 Common Vulnerability Exposure (CVE) ID: CVE-2006-1727 HPdes Security Advisory: HPSBUX02153 http://www.securityfocus.com/archive/1/archive/1/446658/100/200/threaded HPdes Security Advisory: SSRT061181 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10364 http://www.vupen.com/english/advisories/2006/3748 http://www.vupen.com/english/advisories/2008/0083 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1649 http://securitytracker.com/id?1015926 http://securitytracker.com/id?1015927 http://securitytracker.com/id?1015928 http://securitytracker.com/id?1015929 http://secunia.com/advisories/19649 http://secunia.com/advisories/22066 XForce ISS Database: mozilla-printpreview-privilege-escalation(25824) http://xforce.iss.net/xforce/xfdb/25824 Common Vulnerability Exposure (CVE) ID: CVE-2006-1728 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 CERT/CC vulnerability note: VU#932734 http://www.kb.cert.org/vuls/id/932734 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10508 http://www.vupen.com/english/advisories/2007/0058 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1698 http://securitytracker.com/id?1015922 http://securitytracker.com/id?1015923 http://securitytracker.com/id?1015924 http://securitytracker.com/id?1015925 XForce ISS Database: mozilla-generatecrmfrequest-code-execution(25812) http://xforce.iss.net/xforce/xfdb/25812 Common Vulnerability Exposure (CVE) ID: CVE-2006-1729 SuSE Security Announcement: SUSE-SA:2006:035 (Google Search) http://www.novell.com/linux/security/advisories/2006_35_mozilla.html http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10922 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1929 XForce ISS Database: mozilla-textbox-file-access(25823) http://xforce.iss.net/xforce/xfdb/25823 Common Vulnerability Exposure (CVE) ID: CVE-2006-1730 Bugtraq: 20060415 ZDI-06-010: Mozilla Firefox CSS Letter-Spacing Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/431060/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-06-010.html CERT/CC vulnerability note: VU#179014 http://www.kb.cert.org/vuls/id/179014 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10055 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1614 http://securitytracker.com/id?1015915 http://securitytracker.com/id?1015916 http://securitytracker.com/id?1015917 http://securitytracker.com/id?1015918 http://securityreason.com/securityalert/720 XForce ISS Database: mozilla-css-letterspacing-overflow(25826) http://xforce.iss.net/xforce/xfdb/25826 Common Vulnerability Exposure (CVE) ID: CVE-2006-1731 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9604 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1955 XForce ISS Database: mozilla-valueof-xss(25820) http://xforce.iss.net/xforce/xfdb/25820 Common Vulnerability Exposure (CVE) ID: CVE-2006-1732 https://bugzilla.mozilla.org/show_bug.cgi?id=313373 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10232 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1887 XForce ISS Database: mozilla-windows-controllers-xss(25818) http://xforce.iss.net/xforce/xfdb/25818 Common Vulnerability Exposure (CVE) ID: CVE-2006-1733 CERT/CC vulnerability note: VU#488774 http://www.kb.cert.org/vuls/id/488774 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10815 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2020 XForce ISS Database: mozilla-valueof-code-execution(25817) http://xforce.iss.net/xforce/xfdb/25817 Common Vulnerability Exposure (CVE) ID: CVE-2006-1734 CERT/CC vulnerability note: VU#842094 http://www.kb.cert.org/vuls/id/842094 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10755 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1247 XForce ISS Database: mozilla-cloneparent-code-execution(25816) http://xforce.iss.net/xforce/xfdb/25816 Common Vulnerability Exposure (CVE) ID: CVE-2006-1735 CERT/CC vulnerability note: VU#813230 http://www.kb.cert.org/vuls/id/813230 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10930 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1037 XForce ISS Database: mozilla-xbl-code-execution(25815) http://xforce.iss.net/xforce/xfdb/25815 Common Vulnerability Exposure (CVE) ID: CVE-2006-1736 https://bugzilla.mozilla.org/show_bug.cgi?id=293527 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1548 XForce ISS Database: mozilla-saveimageas-ext-spoofing(25814) http://xforce.iss.net/xforce/xfdb/25814 Common Vulnerability Exposure (CVE) ID: CVE-2006-1737 CERT/CC vulnerability note: VU#329500 http://www.kb.cert.org/vuls/id/329500 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10817 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1829 XForce ISS Database: mozilla-javascript-regexpr-memory-corruption(25808) http://xforce.iss.net/xforce/xfdb/25808 Common Vulnerability Exposure (CVE) ID: CVE-2006-1738 CERT/CC vulnerability note: VU#252324 http://www.kb.cert.org/vuls/id/252324 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9405 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1687 XForce ISS Database: mozilla-mozgrid-memory-corruption(25811) http://xforce.iss.net/xforce/xfdb/25811 Common Vulnerability Exposure (CVE) ID: CVE-2006-1739 https://bugzilla.mozilla.org/show_bug.cgi?id=265736 CERT/CC vulnerability note: VU#935556 http://www.kb.cert.org/vuls/id/935556 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9817 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1667 XForce ISS Database: mozilla-css-memory-corruption(25810) http://xforce.iss.net/xforce/xfdb/25810 Common Vulnerability Exposure (CVE) ID: CVE-2006-1740 https://bugzilla.mozilla.org/show_bug.cgi?id=271194 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10424 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1811 XForce ISS Database: mozilla-secure-site-spoofing(25813) http://xforce.iss.net/xforce/xfdb/25813 Common Vulnerability Exposure (CVE) ID: CVE-2006-1741 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9167 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1855 XForce ISS Database: mozilla-eventhandler-xss(25806) http://xforce.iss.net/xforce/xfdb/25806 Common Vulnerability Exposure (CVE) ID: CVE-2006-1742 CERT/CC vulnerability note: VU#492382 http://www.kb.cert.org/vuls/id/492382 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11808 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1087 XForce ISS Database: mozilla-garbage-memory-corruption(25807) http://xforce.iss.net/xforce/xfdb/25807 Common Vulnerability Exposure (CVE) ID: CVE-2006-1790 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11202 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1266 XForce ISS Database: mozilla-installtrigger-memory-corruption(25809) http://xforce.iss.net/xforce/xfdb/25809
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: