Test ID:	1.3.6.1.4.1.25623.1.0.56697
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-275-1 (mozilla)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to mozilla announced via advisory USN-275-1. A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) Ubuntu 5.10 (Breezy Badger) The following packages are affected: mozilla-browser mozilla-mailnews mozilla-psm For details on the issues addressed by the missin gupdate, please visit the referenced security advisories. Solution: The problem can be corrected by upgrading the affected package to version 2:1.7.13-0ubuntu04.10 (for Ubuntu 4.10), 2:1.7.13-0ubuntu05.04 (for Ubuntu 5.04), and 2:1.7.13-0ubuntu5.10 (for Ubuntu 5.10). After a standard system upgrade you need to restart Mozilla to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-275-1 Risk factor : Critical CVSS Score: 10.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-4134 BugTraq ID: 15773 http://www.securityfocus.com/bid/15773 BugTraq ID: 16476 http://www.securityfocus.com/bid/16476 Debian Security Information: DSA-1044 (Google Search) http://www.debian.org/security/2006/dsa-1044 Debian Security Information: DSA-1046 (Google Search) http://www.debian.org/security/2006/dsa-1046 Debian Security Information: DSA-1051 (Google Search) http://www.debian.org/security/2006/dsa-1051 http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html http://www.securityfocus.com/archive/1/425978/100/0/threaded http://www.securityfocus.com/archive/1/425975/100/0/threaded http://marc.info/?l=full-disclosure&m=113405896025702&w=2 http://marc.info/?l=full-disclosure&m=113404911919629&w=2 http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml HPdes Security Advisory: HPSBUX02122 http://www.securityfocus.com/archive/1/438730/100/0/threaded HPdes Security Advisory: SSRT061158 http://www.mandriva.com/security/advisories?name=MDKSA-2006:036 http://www.mandriva.com/security/advisories?name=MDKSA-2006:037 http://www.mozilla.org/security/history-title.html http://www.networksecurity.fi/advisories/netscape-history.html http://www.osvdb.org/21533 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11382 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1619 http://www.redhat.com/support/errata/RHSA-2006-0199.html http://www.redhat.com/support/errata/RHSA-2006-0200.html SCO Security Bulletin: SCOSA-2006.26 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt http://securitytracker.com/id?1015328 http://secunia.com/advisories/17934 http://secunia.com/advisories/17944 http://secunia.com/advisories/17946 http://secunia.com/advisories/18700 http://secunia.com/advisories/18704 http://secunia.com/advisories/18705 http://secunia.com/advisories/18706 http://secunia.com/advisories/18708 http://secunia.com/advisories/18709 http://secunia.com/advisories/19230 http://secunia.com/advisories/19746 http://secunia.com/advisories/19759 http://secunia.com/advisories/19852 http://secunia.com/advisories/19862 http://secunia.com/advisories/19863 http://secunia.com/advisories/19902 http://secunia.com/advisories/19941 http://secunia.com/advisories/21033 http://secunia.com/advisories/21622 SGI Security Advisory: 20060201-01-U ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 https://usn.ubuntu.com/271-1/ https://usn.ubuntu.com/275-1/ http://www.vupen.com/english/advisories/2005/2805 http://www.vupen.com/english/advisories/2006/0413 http://www.vupen.com/english/advisories/2006/3391 Common Vulnerability Exposure (CVE) ID: CVE-2006-0292 1015570 http://securitytracker.com/id?1015570 102550 16476 18700 18703 http://secunia.com/advisories/18703 18704 18705 18706 18708 18709 19230 19746 19759 19780 http://secunia.com/advisories/19780 19821 http://secunia.com/advisories/19821 19823 http://secunia.com/advisories/19823 19852 19862 19863 19902 19941 19950 http://secunia.com/advisories/19950 20051 http://secunia.com/advisories/20051 20060201-01-U 21033 21622 22065 http://secunia.com/advisories/22065 228526 ADV-2006-0413 ADV-2006-3391 ADV-2006-3749 http://www.vupen.com/english/advisories/2006/3749 DSA-1044 DSA-1046 DSA-1051 FEDORA-2006-075 FEDORA-2006-076 FLSA-2006:180036-2 FLSA:180036-1 GLSA-200604-12 GLSA-200604-18 GLSA-200605-09 http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml HPSBUX02122 HPSBUX02156 http://www.securityfocus.com/archive/1/446657/100/200/threaded MDKSA-2006:036 MDKSA-2006:037 MDKSA-2006:078 http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 RHSA-2006:0199 RHSA-2006:0200 RHSA-2006:0330 http://www.redhat.com/support/errata/RHSA-2006-0330.html SCOSA-2006.26 SSRT061158 SSRT061236 SUSE-SA:2006:022 http://www.novell.com/linux/security/advisories/2006_04_25.html USN-271-1 USN-275-1 USN-276-1 https://usn.ubuntu.com/276-1/ http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm http://www.mozilla.org/security/announce/2006/mfsa2006-01.html https://bugzilla.mozilla.org/show_bug.cgi?id=316885 mozilla-javascript-memory-corruption(24430) https://exchange.xforce.ibmcloud.com/vulnerabilities/24430 oval:org.mitre.oval:def:10016 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10016 oval:org.mitre.oval:def:670 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A670 Common Vulnerability Exposure (CVE) ID: CVE-2006-0296 TA06-038A http://www.us-cert.gov/cas/techalerts/TA06-038A.html VU#592425 http://www.kb.cert.org/vuls/id/592425 http://www.mozilla.org/security/announce/2006/mfsa2006-05.html https://bugzilla.mozilla.org/show_bug.cgi?id=319847 mozilla-xuldocument-command-execution(24434) https://exchange.xforce.ibmcloud.com/vulnerabilities/24434 oval:org.mitre.oval:def:11803 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11803 oval:org.mitre.oval:def:1493 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1493 Common Vulnerability Exposure (CVE) ID: CVE-2006-0748 17516 http://www.securityfocus.com/bid/17516 19794 http://secunia.com/advisories/19794 19811 http://secunia.com/advisories/19811 20060404-01-U ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc 20060426 ZDI-06-011: Mozilla Firefox Table Rebuilding Code Execution Vulnerability http://www.securityfocus.com/archive/1/432103/100/0/threaded 22066 http://secunia.com/advisories/22066 ADV-2006-1356 http://www.vupen.com/english/advisories/2006/1356 ADV-2006-3748 http://www.vupen.com/english/advisories/2006/3748 ADV-2008-0083 http://www.vupen.com/english/advisories/2008/0083 FLSA:189137-1 http://www.securityfocus.com/archive/1/436296/100/0/threaded FLSA:189137-2 http://www.securityfocus.com/archive/1/436338/100/0/threaded HPSBUX02153 http://www.securityfocus.com/archive/1/446658/100/200/threaded MDKSA-2006:075 http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 MDKSA-2006:076 http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 RHSA-2006:0329 http://www.redhat.com/support/errata/RHSA-2006-0329.html SSRT061181 http://www.mozilla.org/security/announce/2006/mfsa2006-27.html http://www.zerodayinitiative.com/advisories/ZDI-06-011/ mozilla-table-rebuilding-code-execution(25985) https://exchange.xforce.ibmcloud.com/vulnerabilities/25985 oval:org.mitre.oval:def:11164 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11164 oval:org.mitre.oval:def:1189 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1189 Common Vulnerability Exposure (CVE) ID: CVE-2006-0749 BugTraq ID: 17516 Bugtraq: 20060417 ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/431126/100/0/threaded Cert/CC Advisory: TA06-107A http://www.us-cert.gov/cas/techalerts/TA06-107A.html CERT/CC vulnerability note: VU#736934 http://www.kb.cert.org/vuls/id/736934 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html HPdes Security Advisory: HPSBTU02118 http://www.securityfocus.com/archive/1/434524/100/0/threaded HPdes Security Advisory: SSRT061145 http://www.zerodayinitiative.com/advisories/ZDI-06-009.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11704 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1848 http://www.redhat.com/support/errata/RHSA-2006-0328.html http://secunia.com/advisories/19631 http://secunia.com/advisories/19696 http://secunia.com/advisories/19714 http://secunia.com/advisories/19721 http://secunia.com/advisories/19729 SGI Security Advisory: 20060404-01-U http://securityreason.com/securityalert/729 SuSE Security Announcement: SUSE-SA:2006:021 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html SuSE Security Announcement: SUSE-SA:2006:022 (Google Search) XForce ISS Database: mozilla-nshtmlcontentsink-memory-corruption(25819) https://exchange.xforce.ibmcloud.com/vulnerabilities/25819 Common Vulnerability Exposure (CVE) ID: CVE-2006-1727 1015926 http://securitytracker.com/id?1015926 1015927 http://securitytracker.com/id?1015927 1015928 http://securitytracker.com/id?1015928 1015929 http://securitytracker.com/id?1015929 19631 19649 http://secunia.com/advisories/19649 19696 19714 19721 19729 FEDORA-2006-410 FEDORA-2006-411 RHSA-2006:0328 SUSE-SA:2006:021 http://www.mozilla.org/security/announce/2006/mfsa2006-25.html mozilla-printpreview-privilege-escalation(25824) https://exchange.xforce.ibmcloud.com/vulnerabilities/25824 oval:org.mitre.oval:def:10364 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10364 oval:org.mitre.oval:def:1649 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1649 Common Vulnerability Exposure (CVE) ID: CVE-2006-1728 1015922 http://securitytracker.com/id?1015922 1015923 http://securitytracker.com/id?1015923 1015924 http://securitytracker.com/id?1015924 1015925 http://securitytracker.com/id?1015925 102763 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 ADV-2007-0058 http://www.vupen.com/english/advisories/2007/0058 HPSBTU02118 SSRT061145 TA06-107A VU#932734 http://www.kb.cert.org/vuls/id/932734 http://www.mozilla.org/security/announce/2006/mfsa2006-24.html mozilla-generatecrmfrequest-code-execution(25812) https://exchange.xforce.ibmcloud.com/vulnerabilities/25812 oval:org.mitre.oval:def:10508 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10508 oval:org.mitre.oval:def:1698 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1698 Common Vulnerability Exposure (CVE) ID: CVE-2006-1729 SUSE-SA:2006:035 http://www.novell.com/linux/security/advisories/2006_35_mozilla.html http://www.mozilla.org/security/announce/2006/mfsa2006-23.html mozilla-textbox-file-access(25823) https://exchange.xforce.ibmcloud.com/vulnerabilities/25823 oval:org.mitre.oval:def:10922 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10922 oval:org.mitre.oval:def:1929 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1929 Common Vulnerability Exposure (CVE) ID: CVE-2006-1730 1015915 http://securitytracker.com/id?1015915 1015916 http://securitytracker.com/id?1015916 1015917 http://securitytracker.com/id?1015917 1015918 http://securitytracker.com/id?1015918 20060415 ZDI-06-010: Mozilla Firefox CSS Letter-Spacing Heap Overflow Vulnerability http://www.securityfocus.com/archive/1/431060/100/0/threaded 720 http://securityreason.com/securityalert/720 VU#179014 http://www.kb.cert.org/vuls/id/179014 http://www.mozilla.org/security/announce/2006/mfsa2006-22.html http://www.zerodayinitiative.com/advisories/ZDI-06-010.html mozilla-css-letterspacing-overflow(25826) https://exchange.xforce.ibmcloud.com/vulnerabilities/25826 oval:org.mitre.oval:def:10055 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10055 oval:org.mitre.oval:def:1614 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1614 Common Vulnerability Exposure (CVE) ID: CVE-2006-1731 http://www.mozilla.org/security/announce/2006/mfsa2006-19.html mozilla-valueof-xss(25820) https://exchange.xforce.ibmcloud.com/vulnerabilities/25820 oval:org.mitre.oval:def:1955 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1955 oval:org.mitre.oval:def:9604 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9604 Common Vulnerability Exposure (CVE) ID: CVE-2006-1732 http://www.mozilla.org/security/announce/2006/mfsa2006-17.html https://bugzilla.mozilla.org/show_bug.cgi?id=313373 mozilla-windows-controllers-xss(25818) https://exchange.xforce.ibmcloud.com/vulnerabilities/25818 oval:org.mitre.oval:def:10232 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10232 oval:org.mitre.oval:def:1887 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1887 Common Vulnerability Exposure (CVE) ID: CVE-2006-1733 VU#488774 http://www.kb.cert.org/vuls/id/488774 http://www.mozilla.org/security/announce/2006/mfsa2006-16.html mozilla-valueof-code-execution(25817) https://exchange.xforce.ibmcloud.com/vulnerabilities/25817 oval:org.mitre.oval:def:10815 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10815 oval:org.mitre.oval:def:2020 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2020 Common Vulnerability Exposure (CVE) ID: CVE-2006-1734 VU#842094 http://www.kb.cert.org/vuls/id/842094 http://www.mozilla.org/security/announce/2006/mfsa2006-15.html mozilla-cloneparent-code-execution(25816) https://exchange.xforce.ibmcloud.com/vulnerabilities/25816 oval:org.mitre.oval:def:10755 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10755 oval:org.mitre.oval:def:1247 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1247 Common Vulnerability Exposure (CVE) ID: CVE-2006-1735 VU#813230 http://www.kb.cert.org/vuls/id/813230 http://www.mozilla.org/security/announce/2006/mfsa2006-14.html mozilla-xbl-code-execution(25815) https://exchange.xforce.ibmcloud.com/vulnerabilities/25815 oval:org.mitre.oval:def:1037 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1037 oval:org.mitre.oval:def:10930 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10930 Common Vulnerability Exposure (CVE) ID: CVE-2006-1736 https://bugzilla.mozilla.org/show_bug.cgi?id=293527 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1548 XForce ISS Database: mozilla-saveimageas-ext-spoofing(25814) https://exchange.xforce.ibmcloud.com/vulnerabilities/25814 Common Vulnerability Exposure (CVE) ID: CVE-2006-1737 VU#329500 http://www.kb.cert.org/vuls/id/329500 http://www.mozilla.org/security/announce/2006/mfsa2006-11.html mozilla-javascript-regexpr-memory-corruption(25808) https://exchange.xforce.ibmcloud.com/vulnerabilities/25808 oval:org.mitre.oval:def:10817 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10817 oval:org.mitre.oval:def:1829 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1829 Common Vulnerability Exposure (CVE) ID: CVE-2006-1738 VU#252324 http://www.kb.cert.org/vuls/id/252324 mozilla-mozgrid-memory-corruption(25811) https://exchange.xforce.ibmcloud.com/vulnerabilities/25811 oval:org.mitre.oval:def:1687 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1687 oval:org.mitre.oval:def:9405 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9405 Common Vulnerability Exposure (CVE) ID: CVE-2006-1739 VU#935556 http://www.kb.cert.org/vuls/id/935556 https://bugzilla.mozilla.org/show_bug.cgi?id=265736 mozilla-css-memory-corruption(25810) https://exchange.xforce.ibmcloud.com/vulnerabilities/25810 oval:org.mitre.oval:def:1667 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1667 oval:org.mitre.oval:def:9817 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9817 Common Vulnerability Exposure (CVE) ID: CVE-2006-1740 http://www.mozilla.org/security/announce/2006/mfsa2006-12.html https://bugzilla.mozilla.org/show_bug.cgi?id=271194 mozilla-secure-site-spoofing(25813) https://exchange.xforce.ibmcloud.com/vulnerabilities/25813 oval:org.mitre.oval:def:10424 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10424 oval:org.mitre.oval:def:1811 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1811 Common Vulnerability Exposure (CVE) ID: CVE-2006-1741 http://www.mozilla.org/security/announce/2006/mfsa2006-09.html mozilla-eventhandler-xss(25806) https://exchange.xforce.ibmcloud.com/vulnerabilities/25806 oval:org.mitre.oval:def:1855 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1855 oval:org.mitre.oval:def:9167 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9167 Common Vulnerability Exposure (CVE) ID: CVE-2006-1742 VU#492382 http://www.kb.cert.org/vuls/id/492382 http://www.mozilla.org/security/announce/2006/mfsa2006-10.html mozilla-garbage-memory-corruption(25807) https://exchange.xforce.ibmcloud.com/vulnerabilities/25807 oval:org.mitre.oval:def:1087 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1087 oval:org.mitre.oval:def:11808 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11808 Common Vulnerability Exposure (CVE) ID: CVE-2006-1790 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11202 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1266 XForce ISS Database: mozilla-installtrigger-memory-corruption(25809) https://exchange.xforce.ibmcloud.com/vulnerabilities/25809
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.