Test ID:	1.3.6.1.4.1.25623.1.0.57181
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-296-2 (mozilla-firefox)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to mozilla-firefox announced via advisory USN-296-2. A security issue affects the following Ubuntu releases: Ubuntu 5.04 Ubuntu 5.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. USN-296-1 fixed several vulnerabilities in Firefox for the Ubuntu 6.06 LTS release. This update provides the corresponding fixes for Ubuntu 5.04 and Ubuntu 5.10. For details, please visit the referenced advisories. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 5.04: mozilla-firefox 1.0.8-0ubuntu5.04.1 Ubuntu 5.10: firefox 1.0.8-0ubuntu5.10.1 After a standard system upgrade you need to restart Firefox to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-296-2 Risk factor : Critical CVSS Score: 9.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2775 BugTraq ID: 18228 http://www.securityfocus.com/bid/18228 Bugtraq: 20060602 rPSA-2006-0091-1 firefox thunderbird (Google Search) http://www.securityfocus.com/archive/1/435795/100/0/threaded Cert/CC Advisory: TA06-153A http://www.us-cert.gov/cas/techalerts/TA06-153A.html CERT/CC vulnerability note: VU#243153 http://www.kb.cert.org/vuls/id/243153 Debian Security Information: DSA-1118 (Google Search) http://www.debian.org/security/2006/dsa-1118 Debian Security Information: DSA-1120 (Google Search) http://www.debian.org/security/2006/dsa-1120 Debian Security Information: DSA-1134 (Google Search) http://www.debian.org/security/2006/dsa-1134 http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml HPdes Security Advisory: HPSBUX02153 http://www.securityfocus.com/archive/1/446658/100/200/threaded HPdes Security Advisory: HPSBUX02156 http://www.securityfocus.com/archive/1/446657/100/200/threaded HPdes Security Advisory: SSRT061181 HPdes Security Advisory: SSRT061236 http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 http://securitytracker.com/id?1016202 http://securitytracker.com/id?1016214 http://secunia.com/advisories/20376 http://secunia.com/advisories/20382 http://secunia.com/advisories/20561 http://secunia.com/advisories/20709 http://secunia.com/advisories/21176 http://secunia.com/advisories/21178 http://secunia.com/advisories/21183 http://secunia.com/advisories/21188 http://secunia.com/advisories/21210 http://secunia.com/advisories/21324 http://secunia.com/advisories/21532 http://secunia.com/advisories/21607 http://secunia.com/advisories/22065 http://secunia.com/advisories/22066 SuSE Security Announcement: SUSE-SA:2006:035 (Google Search) http://www.novell.com/linux/security/advisories/2006_35_mozilla.html https://usn.ubuntu.com/296-1/ https://usn.ubuntu.com/296-2/ https://usn.ubuntu.com/297-1/ https://usn.ubuntu.com/297-3/ https://usn.ubuntu.com/323-1/ http://www.vupen.com/english/advisories/2006/2106 http://www.vupen.com/english/advisories/2006/3748 http://www.vupen.com/english/advisories/2006/3749 http://www.vupen.com/english/advisories/2008/0083 XForce ISS Database: mozilla-xul-code-execution(26846) https://exchange.xforce.ibmcloud.com/vulnerabilities/26846 Common Vulnerability Exposure (CVE) ID: CVE-2006-2776 CERT/CC vulnerability note: VU#575969 http://www.kb.cert.org/vuls/id/575969 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9849 http://www.redhat.com/support/errata/RHSA-2006-0578.html http://www.redhat.com/support/errata/RHSA-2006-0594.html RedHat Security Advisories: RHSA-2006:0609 http://rhn.redhat.com/errata/RHSA-2006-0609.html http://www.redhat.com/support/errata/RHSA-2006-0610.html http://www.redhat.com/support/errata/RHSA-2006-0611.html http://secunia.com/advisories/21134 http://secunia.com/advisories/21269 http://secunia.com/advisories/21270 http://secunia.com/advisories/21336 http://secunia.com/advisories/21631 http://secunia.com/advisories/24108 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102800-1 http://www.vupen.com/english/advisories/2007/0573 XForce ISS Database: mozilla-contentdefined-code-execution(26848) https://exchange.xforce.ibmcloud.com/vulnerabilities/26848 Common Vulnerability Exposure (CVE) ID: CVE-2006-2777 CERT/CC vulnerability note: VU#237257 http://www.kb.cert.org/vuls/id/237257 http://secunia.com/advisories/20394 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 http://www.vupen.com/english/advisories/2007/0058 XForce ISS Database: mozilla-nsiselectionprivate-code-execution(26853) https://exchange.xforce.ibmcloud.com/vulnerabilities/26853 Common Vulnerability Exposure (CVE) ID: CVE-2006-2778 CERT/CC vulnerability note: VU#421529 http://www.kb.cert.org/vuls/id/421529 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9703 XForce ISS Database: mozilla-crypto-signtext-bo(26849) https://exchange.xforce.ibmcloud.com/vulnerabilities/26849 Common Vulnerability Exposure (CVE) ID: CVE-2006-2779 CERT/CC vulnerability note: VU#466673 http://www.kb.cert.org/vuls/id/466673 Debian Security Information: DSA-1159 (Google Search) http://www.debian.org/security/2006/dsa-1159 Debian Security Information: DSA-1160 (Google Search) http://www.debian.org/security/2006/dsa-1160 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9762 http://secunia.com/advisories/21634 http://secunia.com/advisories/21654 http://secunia.com/advisories/27216 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102943-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200387-1 http://www.vupen.com/english/advisories/2007/3488 XForce ISS Database: mozilla-browserengine-memory-corruption(26843) https://exchange.xforce.ibmcloud.com/vulnerabilities/26843 Common Vulnerability Exposure (CVE) ID: CVE-2006-2780 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11305 Common Vulnerability Exposure (CVE) ID: CVE-2006-2782 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10429 XForce ISS Database: mozilla-firefox-textbox-file-access(26851) https://exchange.xforce.ibmcloud.com/vulnerabilities/26851 Common Vulnerability Exposure (CVE) ID: CVE-2006-2783 http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10772 http://secunia.com/advisories/31074 http://secunia.com/advisories/35379 http://www.vupen.com/english/advisories/2008/2094/references http://www.vupen.com/english/advisories/2009/1522 XForce ISS Database: mozilla-bom-utf8-xss(26852) https://exchange.xforce.ibmcloud.com/vulnerabilities/26852 Common Vulnerability Exposure (CVE) ID: CVE-2006-2784 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9768 XForce ISS Database: mozilla-pluginspage-code-execution(26847) https://exchange.xforce.ibmcloud.com/vulnerabilities/26847 Common Vulnerability Exposure (CVE) ID: CVE-2006-2785 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10545 XForce ISS Database: mozilla-viewimage-xss(26845) https://exchange.xforce.ibmcloud.com/vulnerabilities/26845 Common Vulnerability Exposure (CVE) ID: CVE-2006-2786 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9966 XForce ISS Database: mozilla-http-response-smuggling(26844) https://exchange.xforce.ibmcloud.com/vulnerabilities/26844 Common Vulnerability Exposure (CVE) ID: CVE-2006-2787 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9491 XForce ISS Database: mozilla-valueof-sandbox-bypass(26842) https://exchange.xforce.ibmcloud.com/vulnerabilities/26842 Common Vulnerability Exposure (CVE) ID: CVE-2006-2788 21269 21270 21336 21532 21631 22247 http://secunia.com/advisories/22247 22299 http://secunia.com/advisories/22299 22342 http://secunia.com/advisories/22342 22849 http://secunia.com/advisories/22849 DSA-1191 http://www.us.debian.org/security/2006/dsa-1191 DSA-1192 http://www.debian.org/security/2006/dsa-1192 DSA-1210 http://www.debian.org/security/2006/dsa-1210 MDKSA-2006:143 MDKSA-2006:145 RHSA-2006:0578 RHSA-2006:0594 RHSA-2006:0609 RHSA-2006:0610 RHSA-2006:0611 USN-296-1 USN-361-1 http://www.ubuntu.com/usn/usn-361-1 https://bugzilla.mozilla.org/show_bug.cgi?id=321598 oval:org.mitre.oval:def:11065 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11065 Common Vulnerability Exposure (CVE) ID: CVE-2006-1729 102550 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 17516 http://www.securityfocus.com/bid/17516 19631 http://secunia.com/advisories/19631 19649 http://secunia.com/advisories/19649 19696 http://secunia.com/advisories/19696 19714 http://secunia.com/advisories/19714 19721 http://secunia.com/advisories/19721 19729 http://secunia.com/advisories/19729 19746 http://secunia.com/advisories/19746 19759 http://secunia.com/advisories/19759 19794 http://secunia.com/advisories/19794 19811 http://secunia.com/advisories/19811 19852 http://secunia.com/advisories/19852 19862 http://secunia.com/advisories/19862 19863 http://secunia.com/advisories/19863 19902 http://secunia.com/advisories/19902 19941 http://secunia.com/advisories/19941 20060404-01-U ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc 21033 http://secunia.com/advisories/21033 21622 http://secunia.com/advisories/21622 22066 228526 http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 ADV-2006-1356 http://www.vupen.com/english/advisories/2006/1356 ADV-2006-3391 http://www.vupen.com/english/advisories/2006/3391 ADV-2006-3748 ADV-2008-0083 DSA-1044 http://www.debian.org/security/2006/dsa-1044 DSA-1046 http://www.debian.org/security/2006/dsa-1046 DSA-1051 http://www.debian.org/security/2006/dsa-1051 FEDORA-2006-410 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html FEDORA-2006-411 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html FLSA:189137-1 http://www.securityfocus.com/archive/1/436296/100/0/threaded FLSA:189137-2 http://www.securityfocus.com/archive/1/436338/100/0/threaded GLSA-200604-12 http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml GLSA-200604-18 http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml HPSBUX02153 MDKSA-2006:075 http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 MDKSA-2006:076 http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 RHSA-2006:0328 http://www.redhat.com/support/errata/RHSA-2006-0328.html RHSA-2006:0329 http://www.redhat.com/support/errata/RHSA-2006-0329.html SCOSA-2006.26 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt SSRT061181 SUSE-SA:2006:021 http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html SUSE-SA:2006:035 USN-271-1 https://usn.ubuntu.com/271-1/ USN-275-1 https://usn.ubuntu.com/275-1/ http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm http://www.mozilla.org/security/announce/2006/mfsa2006-23.html mozilla-textbox-file-access(25823) https://exchange.xforce.ibmcloud.com/vulnerabilities/25823 oval:org.mitre.oval:def:10922 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10922 oval:org.mitre.oval:def:1929 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1929 Common Vulnerability Exposure (CVE) ID: CVE-2005-0752 13228 http://www.securityfocus.com/bid/13228 14938 http://secunia.com/advisories/14938 RHSA-2005:383 http://www.redhat.com/support/errata/RHSA-2005-383.html http://www.mozilla.org/security/announce/mfsa2005-34.html oval:org.mitre.oval:def:100024 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100024 oval:org.mitre.oval:def:10279 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10279
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.