Test ID:	1.3.6.1.4.1.25623.1.0.56698
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-276-1 (mozilla-thunderbird)
Summary:	Ubuntu USN-276-1 (mozilla-thunderbird)
Description:	The remote host is missing an update to mozilla-thunderbird announced via advisory USN-276-1. A security issue affects the following Ubuntu releases: Ubuntu 5.04 (Hoary Hedgehog) Ubuntu 5.10 (Breezy Badger) The following packages are affected: mozilla-thunderbird For details on the issues addressed by the missing update, please visit the referenced security advisories. Solution: The problem can be corrected by upgrading the affected package to version 1.0.8-0ubuntu05.04 (for Ubuntu 5.04) or 1.0.8-0ubuntu05.10.1 (for Ubuntu 5.10). After a standard system upgrade you need to restart Thunderbird to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-276-1 Risk factor : Critical
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-0292 Debian Security Information: DSA-1044 (Google Search) http://www.debian.org/security/2006/dsa-1044 Debian Security Information: DSA-1046 (Google Search) http://www.debian.org/security/2006/dsa-1046 Debian Security Information: DSA-1051 (Google Search) http://www.debian.org/security/2006/dsa-1051 http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html http://www.securityfocus.com/archive/1/archive/1/425978/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/425975/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml HPdes Security Advisory: HPSBUX02122 http://www.securityfocus.com/archive/1/archive/1/438730/100/0/threaded HPdes Security Advisory: SSRT061158 HPdes Security Advisory: HPSBUX02156 http://www.securityfocus.com/archive/1/archive/1/446657/100/200/threaded HPdes Security Advisory: SSRT061236 http://www.mandriva.com/security/advisories?name=MDKSA-2006:036 http://www.mandriva.com/security/advisories?name=MDKSA-2006:078 http://www.mandriva.com/security/advisories?name=MDKSA-2006:037 http://www.redhat.com/support/errata/RHSA-2006-0199.html http://www.redhat.com/support/errata/RHSA-2006-0200.html http://www.redhat.com/support/errata/RHSA-2006-0330.html SCO Security Bulletin: SCOSA-2006.26 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt SGI Security Advisory: 20060201-01-U ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 SuSE Security Announcement: SUSE-SA:2006:022 (Google Search) http://www.novell.com/linux/security/advisories/2006_04_25.html SuSE Security Announcement: SUSE-SA:2006:004 (Google Search) http://www.ubuntulinux.org/support/documentation/usn/usn-275-1 http://www.ubuntulinux.org/support/documentation/usn/usn-276-1 http://www.ubuntulinux.org/support/documentation/usn/usn-271-1 BugTraq ID: 16476 http://www.securityfocus.com/bid/16476 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10016 http://www.vupen.com/english/advisories/2006/0413 http://www.vupen.com/english/advisories/2006/3391 http://www.vupen.com/english/advisories/2006/3749 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:670 http://securitytracker.com/id?1015570 http://secunia.com/advisories/18700 http://secunia.com/advisories/18703 http://secunia.com/advisories/18704 http://secunia.com/advisories/18708 http://secunia.com/advisories/18709 http://secunia.com/advisories/18705 http://secunia.com/advisories/18706 http://secunia.com/advisories/19230 http://secunia.com/advisories/19759 http://secunia.com/advisories/19821 http://secunia.com/advisories/19823 http://secunia.com/advisories/19852 http://secunia.com/advisories/19862 http://secunia.com/advisories/19863 http://secunia.com/advisories/19902 http://secunia.com/advisories/19950 http://secunia.com/advisories/19941 http://secunia.com/advisories/19746 http://secunia.com/advisories/21033 http://secunia.com/advisories/21622 http://secunia.com/advisories/19780 http://secunia.com/advisories/20051 http://secunia.com/advisories/22065 XForce ISS Database: mozilla-javascript-memory-corruption(24430) http://xforce.iss.net/xforce/xfdb/24430 Common Vulnerability Exposure (CVE) ID: CVE-2006-0296 Cert/CC Advisory: TA06-038A http://www.us-cert.gov/cas/techalerts/TA06-038A.html CERT/CC vulnerability note: VU#592425 http://www.kb.cert.org/vuls/id/592425 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11803 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1493 XForce ISS Database: mozilla-xuldocument-command-execution(24434) http://xforce.iss.net/xforce/xfdb/24434 Common Vulnerability Exposure (CVE) ID: CVE-2006-0748 Bugtraq: 20060426 ZDI-06-011: Mozilla Firefox Table Rebuilding Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/432103/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-06-011/ http://www.securityfocus.com/archive/1/archive/1/436296/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/436338/100/0/threaded HPdes Security Advisory: HPSBUX02153 http://www.securityfocus.com/archive/1/archive/1/446658/100/200/threaded HPdes Security Advisory: SSRT061181 http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 http://www.redhat.com/support/errata/RHSA-2006-0329.html SGI Security Advisory: 20060404-01-U ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc BugTraq ID: 17516 http://www.securityfocus.com/bid/17516 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11164 http://www.vupen.com/english/advisories/2006/1356 http://www.vupen.com/english/advisories/2006/3748 http://www.vupen.com/english/advisories/2008/0083 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1189 http://secunia.com/advisories/19794 http://secunia.com/advisories/19811 http://secunia.com/advisories/22066 XForce ISS Database: mozilla-table-rebuilding-code-execution(25985) http://xforce.iss.net/xforce/xfdb/25985 Common Vulnerability Exposure (CVE) ID: CVE-2006-0749 Bugtraq: 20060417 ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/431126/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-06-009.html http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html HPdes Security Advisory: HPSBTU02118 http://www.securityfocus.com/archive/1/archive/1/434524/100/0/threaded HPdes Security Advisory: SSRT061145 http://www.redhat.com/support/errata/RHSA-2006-0328.html SuSE Security Announcement: SUSE-SA:2006:021 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html Cert/CC Advisory: TA06-107A http://www.us-cert.gov/cas/techalerts/TA06-107A.html CERT/CC vulnerability note: VU#736934 http://www.kb.cert.org/vuls/id/736934 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11704 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1848 http://secunia.com/advisories/19631 http://secunia.com/advisories/19714 http://secunia.com/advisories/19721 http://secunia.com/advisories/19696 http://secunia.com/advisories/19729 http://securityreason.com/securityalert/729 XForce ISS Database: mozilla-nshtmlcontentsink-memory-corruption(25819) http://xforce.iss.net/xforce/xfdb/25819 Common Vulnerability Exposure (CVE) ID: CVE-2006-0884 Bugtraq: 20060222 Mozilla Thunderbird : Remote Code Execution & Denial of Service (Google Search) http://www.securityfocus.com/archive/1/archive/1/425786/100/0/threaded http://www.mandriva.com/security/advisories?name=MDKSA-2006:052 BugTraq ID: 16770 http://www.securityfocus.com/bid/16770 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10782 http://www.osvdb.org/23653 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2024 http://securitytracker.com/id?1015665 XForce ISS Database: mozilla-inline-fwd-code-execution(25983) http://xforce.iss.net/xforce/xfdb/25983 Common Vulnerability Exposure (CVE) ID: CVE-2006-1045 Bugtraq: 20060228 Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/426347 BugTraq ID: 16881 http://www.securityfocus.com/bid/16881 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10254 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1975 http://securityreason.com/securityalert/514 XForce ISS Database: thunderbird-inline-information-disclosure(24959) http://xforce.iss.net/xforce/xfdb/24959 Common Vulnerability Exposure (CVE) ID: CVE-2006-1727 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10364 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1649 http://securitytracker.com/id?1015926 http://securitytracker.com/id?1015927 http://securitytracker.com/id?1015928 http://securitytracker.com/id?1015929 http://secunia.com/advisories/19649 XForce ISS Database: mozilla-printpreview-privilege-escalation(25824) http://xforce.iss.net/xforce/xfdb/25824 Common Vulnerability Exposure (CVE) ID: CVE-2006-1728 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 CERT/CC vulnerability note: VU#932734 http://www.kb.cert.org/vuls/id/932734 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10508 http://www.vupen.com/english/advisories/2007/0058 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1698 http://securitytracker.com/id?1015922 http://securitytracker.com/id?1015923 http://securitytracker.com/id?1015924 http://securitytracker.com/id?1015925 XForce ISS Database: mozilla-generatecrmfrequest-code-execution(25812) http://xforce.iss.net/xforce/xfdb/25812 Common Vulnerability Exposure (CVE) ID: CVE-2006-1730 Bugtraq: 20060415 ZDI-06-010: Mozilla Firefox CSS Letter-Spacing Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/431060/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-06-010.html CERT/CC vulnerability note: VU#179014 http://www.kb.cert.org/vuls/id/179014 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10055 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1614 http://securitytracker.com/id?1015915 http://securitytracker.com/id?1015916 http://securitytracker.com/id?1015917 http://securitytracker.com/id?1015918 http://securityreason.com/securityalert/720 XForce ISS Database: mozilla-css-letterspacing-overflow(25826) http://xforce.iss.net/xforce/xfdb/25826 Common Vulnerability Exposure (CVE) ID: CVE-2006-1731 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9604 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1955 XForce ISS Database: mozilla-valueof-xss(25820) http://xforce.iss.net/xforce/xfdb/25820 Common Vulnerability Exposure (CVE) ID: CVE-2006-1732 https://bugzilla.mozilla.org/show_bug.cgi?id=313373 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10232 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1887 XForce ISS Database: mozilla-windows-controllers-xss(25818) http://xforce.iss.net/xforce/xfdb/25818 Common Vulnerability Exposure (CVE) ID: CVE-2006-1733 CERT/CC vulnerability note: VU#488774 http://www.kb.cert.org/vuls/id/488774 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10815 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2020 XForce ISS Database: mozilla-valueof-code-execution(25817) http://xforce.iss.net/xforce/xfdb/25817 Common Vulnerability Exposure (CVE) ID: CVE-2006-1734 CERT/CC vulnerability note: VU#842094 http://www.kb.cert.org/vuls/id/842094 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10755 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1247 XForce ISS Database: mozilla-cloneparent-code-execution(25816) http://xforce.iss.net/xforce/xfdb/25816 Common Vulnerability Exposure (CVE) ID: CVE-2006-1735 CERT/CC vulnerability note: VU#813230 http://www.kb.cert.org/vuls/id/813230 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10930 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1037 XForce ISS Database: mozilla-xbl-code-execution(25815) http://xforce.iss.net/xforce/xfdb/25815 Common Vulnerability Exposure (CVE) ID: CVE-2006-1737 CERT/CC vulnerability note: VU#329500 http://www.kb.cert.org/vuls/id/329500 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10817 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1829 XForce ISS Database: mozilla-javascript-regexpr-memory-corruption(25808) http://xforce.iss.net/xforce/xfdb/25808 Common Vulnerability Exposure (CVE) ID: CVE-2006-1738 CERT/CC vulnerability note: VU#252324 http://www.kb.cert.org/vuls/id/252324 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9405 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1687 XForce ISS Database: mozilla-mozgrid-memory-corruption(25811) http://xforce.iss.net/xforce/xfdb/25811 Common Vulnerability Exposure (CVE) ID: CVE-2006-1739 https://bugzilla.mozilla.org/show_bug.cgi?id=265736 CERT/CC vulnerability note: VU#935556 http://www.kb.cert.org/vuls/id/935556 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9817 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1667 XForce ISS Database: mozilla-css-memory-corruption(25810) http://xforce.iss.net/xforce/xfdb/25810 Common Vulnerability Exposure (CVE) ID: CVE-2006-1741 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9167 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1855 XForce ISS Database: mozilla-eventhandler-xss(25806) http://xforce.iss.net/xforce/xfdb/25806 Common Vulnerability Exposure (CVE) ID: CVE-2006-1742 CERT/CC vulnerability note: VU#492382 http://www.kb.cert.org/vuls/id/492382 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11808 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1087 XForce ISS Database: mozilla-garbage-memory-corruption(25807) http://xforce.iss.net/xforce/xfdb/25807 Common Vulnerability Exposure (CVE) ID: CVE-2006-1790 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11202 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1266 XForce ISS Database: mozilla-installtrigger-memory-corruption(25809) http://xforce.iss.net/xforce/xfdb/25809
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: