Test ID:	1.3.6.1.4.1.25623.1.0.57498
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-354-1 (firefox)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to firefox announced via advisory USN-354-1. A security issue affects the following Ubuntu releases: Ubuntu 5.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. For details, please visit the referenced security advisories. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 5.10: firefox 1.5.dfsg+1.5.0.7-0ubuntu5.10.3 firefox-dom-inspector 1.5.dfsg+1.5.0.7-0ubuntu5.10.3 firefox-gnome-support 1.5.dfsg+1.5.0.7-0ubuntu5.10.3 devhelp 0.10-1ubuntu2.1 devhelp-common 0.10-1ubuntu2.1 epiphany-browser 1.8.2-0ubuntu1.1 epiphany-browser-dev 1.8.2-0ubuntu1.1 gnome-app-install 0+20051005.1 libdevhelp-1-0 0.10-1ubuntu2.1 libdevhelp-1-dev 0.10-1ubuntu2.1 mozilla-firefox-locale-* 1.5-ubuntu5.10-1 yelp 2.12.1-0ubuntu1.1 After a standard system upgrade you need to restart Firefox to effect the necessary changes. Since the 1.0.x series of Firefox is not supported any more, this update introduces the firefox 1.5 series into Ubuntu 5.10. Please check whether all your extensions still work as expected. http://www.securityspace.com/smysecure/catid.html?in=USN-354-1 Risk factor : Critical CVSS Score: 10.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3113 BugTraq ID: 19181 http://www.securityfocus.com/bid/19181 BugTraq ID: 19197 http://www.securityfocus.com/bid/19197 Bugtraq: 20060727 Secunia Research: Mozilla Firefox XPCOM Event Handling MemoryCorruption (Google Search) http://www.securityfocus.com/archive/1/441330/100/0/threaded Bugtraq: 20060727 rPSA-2006-0137-1 firefox (Google Search) http://www.securityfocus.com/archive/1/441333/100/0/threaded Cert/CC Advisory: TA06-208A http://www.us-cert.gov/cas/techalerts/TA06-208A.html CERT/CC vulnerability note: VU#239124 http://www.kb.cert.org/vuls/id/239124 http://security.gentoo.org/glsa/glsa-200608-02.xml http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml http://security.gentoo.org/glsa/glsa-200608-04.xml HPdes Security Advisory: HPSBUX02153 http://www.securityfocus.com/archive/1/446658/100/200/threaded HPdes Security Advisory: HPSBUX02156 http://www.securityfocus.com/archive/1/446657/100/200/threaded HPdes Security Advisory: SSRT061181 HPdes Security Advisory: SSRT061236 http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 http://secunia.com/secunia_research/2006-53/advisory/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10261 http://www.redhat.com/support/errata/RHSA-2006-0594.html http://www.redhat.com/support/errata/RHSA-2006-0608.html RedHat Security Advisories: RHSA-2006:0609 http://rhn.redhat.com/errata/RHSA-2006-0609.html http://www.redhat.com/support/errata/RHSA-2006-0610.html http://www.redhat.com/support/errata/RHSA-2006-0611.html http://securitytracker.com/id?1016586 http://securitytracker.com/id?1016587 http://securitytracker.com/id?1016588 http://secunia.com/advisories/19873 http://secunia.com/advisories/21216 http://secunia.com/advisories/21228 http://secunia.com/advisories/21229 http://secunia.com/advisories/21243 http://secunia.com/advisories/21246 http://secunia.com/advisories/21250 http://secunia.com/advisories/21262 http://secunia.com/advisories/21269 http://secunia.com/advisories/21270 http://secunia.com/advisories/21275 http://secunia.com/advisories/21336 http://secunia.com/advisories/21343 http://secunia.com/advisories/21358 http://secunia.com/advisories/21361 http://secunia.com/advisories/21529 http://secunia.com/advisories/21532 http://secunia.com/advisories/21607 http://secunia.com/advisories/21631 http://secunia.com/advisories/22055 http://secunia.com/advisories/22065 http://secunia.com/advisories/22066 http://secunia.com/advisories/22210 SGI Security Advisory: 20060703-01-P ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc SuSE Security Announcement: SUSE-SA:2006:048 (Google Search) http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html https://usn.ubuntu.com/327-1/ https://usn.ubuntu.com/329-1/ http://www.ubuntu.com/usn/usn-350-1 http://www.ubuntu.com/usn/usn-354-1 http://www.vupen.com/english/advisories/2006/2998 http://www.vupen.com/english/advisories/2006/3748 http://www.vupen.com/english/advisories/2006/3749 http://www.vupen.com/english/advisories/2008/0083 XForce ISS Database: mozilla-xpcom-memory-corruption(27982) https://exchange.xforce.ibmcloud.com/vulnerabilities/27982 Common Vulnerability Exposure (CVE) ID: CVE-2006-3677 BugTraq ID: 19192 http://www.securityfocus.com/bid/19192 Bugtraq: 20060726 ZDI-06-025: Mozilla Firefox Javascript navigator Object Vulnerability (Google Search) http://www.securityfocus.com/archive/1/441332/100/0/threaded CERT/CC vulnerability note: VU#670060 http://www.kb.cert.org/vuls/id/670060 http://www.zerodayinitiative.com/advisories/ZDI-06-025.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10745 XForce ISS Database: iphone-mobilesafari-dos(39998) https://exchange.xforce.ibmcloud.com/vulnerabilities/39998 XForce ISS Database: mozilla-javascript-navigator-code-excecution(27981) https://exchange.xforce.ibmcloud.com/vulnerabilities/27981 Common Vulnerability Exposure (CVE) ID: CVE-2006-3801 1016586 1016587 1016588 19181 19873 20060703-01-P 20060727 rPSA-2006-0137-1 firefox 21216 21228 21229 21243 21246 21250 21262 21269 21270 21336 21343 21358 21361 21529 21532 21631 22065 22066 22210 ADV-2006-2998 ADV-2006-3748 ADV-2006-3749 ADV-2008-0083 GLSA-200608-02 GLSA-200608-03 HPSBUX02153 HPSBUX02156 MDKSA-2006:143 MDKSA-2006:145 RHSA-2006:0594 RHSA-2006:0608 RHSA-2006:0609 RHSA-2006:0610 RHSA-2006:0611 SSRT061181 SSRT061236 SUSE-SA:2006:048 TA06-208A USN-327-1 USN-354-1 VU#476724 http://www.kb.cert.org/vuls/id/476724 http://www.mozilla.org/security/announce/2006/mfsa2006-44.html https://issues.rpath.com/browse/RPL-536 https://issues.rpath.com/browse/RPL-537 mozilla-deleted-frame-code-execution(27980) https://exchange.xforce.ibmcloud.com/vulnerabilities/27980 oval:org.mitre.oval:def:11501 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11501 Common Vulnerability Exposure (CVE) ID: CVE-2006-3802 21275 21607 22055 GLSA-200608-04 MDKSA-2006:146 USN-329-1 USN-350-1 http://www.mozilla.org/security/announce/2006/mfsa2006-47.html mozilla-dom-method-xss(27983) https://exchange.xforce.ibmcloud.com/vulnerabilities/27983 oval:org.mitre.oval:def:9611 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9611 Common Vulnerability Exposure (CVE) ID: CVE-2006-3803 VU#265964 http://www.kb.cert.org/vuls/id/265964 http://www.mozilla.org/security/announce/2006/mfsa2006-48.html mozilla-javascript-garbage-race-condition(27984) https://exchange.xforce.ibmcloud.com/vulnerabilities/27984 oval:org.mitre.oval:def:10635 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10635 Common Vulnerability Exposure (CVE) ID: CVE-2006-3805 102763 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102763-1 21634 http://secunia.com/advisories/21634 21654 http://secunia.com/advisories/21654 21675 http://secunia.com/advisories/21675 22342 http://secunia.com/advisories/22342 DSA-1159 http://www.debian.org/security/2006/dsa-1159 DSA-1160 http://www.debian.org/security/2006/dsa-1160 DSA-1161 http://www.debian.org/security/2006/dsa-1161 USN-361-1 http://www.ubuntu.com/usn/usn-361-1 VU#876420 http://www.kb.cert.org/vuls/id/876420 http://www.mozilla.org/security/announce/2006/mfsa2006-50.html mozilla-garbage-collection-object-deletion(27986) https://exchange.xforce.ibmcloud.com/vulnerabilities/27986 oval:org.mitre.oval:def:10690 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10690 Common Vulnerability Exposure (CVE) ID: CVE-2006-3806 ADV-2007-0058 http://www.vupen.com/english/advisories/2007/0058 VU#655892 http://www.kb.cert.org/vuls/id/655892 mozilla-javascript-engine-overflow(27987) https://exchange.xforce.ibmcloud.com/vulnerabilities/27987 oval:org.mitre.oval:def:11232 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11232 Common Vulnerability Exposure (CVE) ID: CVE-2006-3807 VU#687396 http://www.kb.cert.org/vuls/id/687396 http://www.mozilla.org/security/announce/2006/mfsa2006-51.html mozilla-js-constructor-code-execution(27988) https://exchange.xforce.ibmcloud.com/vulnerabilities/27988 oval:org.mitre.oval:def:10374 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10374 Common Vulnerability Exposure (CVE) ID: CVE-2006-3808 http://www.mozilla.org/security/announce/2006/mfsa2006-52.html mozilla-pac-code-execution(27989) https://exchange.xforce.ibmcloud.com/vulnerabilities/27989 oval:org.mitre.oval:def:10845 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10845 Common Vulnerability Exposure (CVE) ID: CVE-2006-3809 http://www.mozilla.org/security/announce/2006/mfsa2006-53.html mozilla-universalbrowserread-escalation(27990) https://exchange.xforce.ibmcloud.com/vulnerabilities/27990 oval:org.mitre.oval:def:9753 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9753 Common Vulnerability Exposure (CVE) ID: CVE-2006-3810 VU#911004 http://www.kb.cert.org/vuls/id/911004 http://www.mozilla.org/security/announce/2006/mfsa2006-54.html mozilla-xpcnativewrapper-xss(27991) https://exchange.xforce.ibmcloud.com/vulnerabilities/27991 oval:org.mitre.oval:def:10113 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10113 Common Vulnerability Exposure (CVE) ID: CVE-2006-3811 102971 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102971-1 25839 http://secunia.com/advisories/25839 ADV-2007-2350 http://www.vupen.com/english/advisories/2007/2350 VU#527676 http://www.kb.cert.org/vuls/id/527676 http://www.mozilla.org/security/announce/2006/mfsa2006-55.html mozilla-multiple-memory-corruption(27992) https://exchange.xforce.ibmcloud.com/vulnerabilities/27992 oval:org.mitre.oval:def:9934 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9934 Common Vulnerability Exposure (CVE) ID: CVE-2006-3812 VU#398492 http://www.kb.cert.org/vuls/id/398492 http://www.mozilla.org/security/announce/2006/mfsa2006-56.html mozilla-chrome-information-disclosure(27993) https://exchange.xforce.ibmcloud.com/vulnerabilities/27993 oval:org.mitre.oval:def:11013 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11013 Common Vulnerability Exposure (CVE) ID: CVE-2006-4253 BugTraq ID: 19488 http://www.securityfocus.com/bid/19488 BugTraq ID: 19534 http://www.securityfocus.com/bid/19534 Bugtraq: 20060812 Concurrency-related vulnerabilities in browsers - expect problems (Google Search) http://www.securityfocus.com/archive/1/443020/100/100/threaded Bugtraq: 20061006 Re: Concurrency-related vulnerabilities in browsers - expect problems (Google Search) http://www.securityfocus.com/archive/1/443306/100/100/threaded Bugtraq: 20060817 RE: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems (Google Search) http://www.securityfocus.com/archive/1/443528/100/0/threaded Bugtraq: 20060817 Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems (Google Search) http://www.securityfocus.com/archive/1/443500/100/100/threaded Bugtraq: 20060915 rPSA-2006-0169-1 firefox thunderbird (Google Search) http://www.securityfocus.com/archive/1/446140/100/0/threaded http://www.securityfocus.com/archive/1/447840/100/200/threaded http://www.securityfocus.com/archive/1/447837/100/200/threaded Bugtraq: 20061017 Flaw in Firefox 2.0 RC2 (Google Search) http://www.securityfocus.com/archive/1/448956/100/100/threaded Bugtraq: 20061019 Re: Flaw in Firefox 2.0 RC2 (Google Search) http://www.securityfocus.com/archive/1/448984/100/100/threaded http://www.securityfocus.com/archive/1/449245/100/100/threaded Bugtraq: 20061023 Flaw in Firefox 2.0 Final (Google Search) http://www.securityfocus.com/archive/1/449487/100/0/threaded Bugtraq: 20061025 Mozilla Firefox JavaScript Handler Race Condition Memory Corruption Vulnerability (Google Search) http://www.securityfocus.com/archive/1/449726/100/0/threaded http://security.gentoo.org/glsa/glsa-200609-19.xml http://security.gentoo.org/glsa/glsa-200610-01.xml http://security.gentoo.org/glsa/glsa-200610-04.xml http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 http://www.mandriva.com/security/advisories?name=MDKSA-2006:168 http://www.mandriva.com/security/advisories?name=MDKSA-2006:169 http://lcamtuf.coredump.cx/ffoxdie.html http://lcamtuf.coredump.cx/ffoxdie3.html http://www.pianetapc.it/view.php?id=770 http://www.securiteam.com/securitynews/5VP0M0AJFW.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9528 http://www.redhat.com/support/errata/RHSA-2006-0675.html http://www.redhat.com/support/errata/RHSA-2006-0676.html http://www.redhat.com/support/errata/RHSA-2006-0677.html http://securitytracker.com/id?1016846 http://securitytracker.com/id?1016847 http://securitytracker.com/id?1016848 http://secunia.com/advisories/21513 http://secunia.com/advisories/21906 http://secunia.com/advisories/21915 http://secunia.com/advisories/21916 http://secunia.com/advisories/21939 http://secunia.com/advisories/21940 http://secunia.com/advisories/21949 http://secunia.com/advisories/21950 http://secunia.com/advisories/22001 http://secunia.com/advisories/22025 http://secunia.com/advisories/22036 http://secunia.com/advisories/22056 http://secunia.com/advisories/22074 http://secunia.com/advisories/22088 http://secunia.com/advisories/22195 http://secunia.com/advisories/22274 http://secunia.com/advisories/22391 http://secunia.com/advisories/22422 http://secunia.com/advisories/24711 SGI Security Advisory: 20060901-01-P ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc SuSE Security Announcement: SUSE-SA:2006:054 (Google Search) http://www.novell.com/linux/security/advisories/2006_54_mozilla.html http://www.ubuntu.com/usn/usn-351-1 http://www.ubuntu.com/usn/usn-352-1 http://www.vupen.com/english/advisories/2006/3617 http://www.vupen.com/english/advisories/2007/1198 Common Vulnerability Exposure (CVE) ID: CVE-2006-4340 1016858 http://securitytracker.com/id?1016858 1016859 http://securitytracker.com/id?1016859 1016860 http://securitytracker.com/id?1016860 102648 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1 102781 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102781-1 20060901-01-P 20060915 rPSA-2006-0169-1 firefox thunderbird 21903 http://secunia.com/advisories/21903 21906 21915 21916 21939 21940 21949 21950 22001 22025 22036 22044 http://secunia.com/advisories/22044 22056 22074 22088 22195 22226 http://secunia.com/advisories/22226 22247 http://secunia.com/advisories/22247 22274 22299 http://secunia.com/advisories/22299 22422 22446 http://secunia.com/advisories/22446 22849 http://secunia.com/advisories/22849 22992 http://secunia.com/advisories/22992 23883 http://secunia.com/advisories/23883 24711 ADV-2006-3617 ADV-2006-3622 http://www.vupen.com/english/advisories/2006/3622 ADV-2006-3899 http://www.vupen.com/english/advisories/2006/3899 ADV-2007-0293 http://www.vupen.com/english/advisories/2007/0293 ADV-2007-1198 DSA-1191 http://www.us.debian.org/security/2006/dsa-1191 DSA-1192 http://www.debian.org/security/2006/dsa-1192 DSA-1210 http://www.debian.org/security/2006/dsa-1210 GLSA-200609-19 GLSA-200610-01 GLSA-200610-06 http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml MDKSA-2006:168 MDKSA-2006:169 RHSA-2006:0675 RHSA-2006:0676 RHSA-2006:0677 SUSE-SA:2006:054 SUSE-SA:2006:055 http://www.novell.com/linux/security/advisories/2006_55_ssl.html TA06-312A http://www.us-cert.gov/cas/techalerts/TA06-312A.html USN-351-1 USN-352-1 [ietf-openpgp] 20060827 Bleichenbacher's RSA signature forgery based on implementation error http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/ http://www.mozilla.org/security/announce/2006/mfsa2006-60.html http://www.mozilla.org/security/announce/2006/mfsa2006-66.html https://issues.rpath.com/browse/RPL-640 mozilla-nss-security-bypass(30098) https://exchange.xforce.ibmcloud.com/vulnerabilities/30098 oval:org.mitre.oval:def:11007 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11007 Common Vulnerability Exposure (CVE) ID: CVE-2006-4565 1016846 1016847 1016848 20042 http://www.securityfocus.com/bid/20042 22391 GLSA-200610-04 http://www.mozilla.org/security/announce/2006/mfsa2006-57.html mozilla-javascript-expression-bo(28955) https://exchange.xforce.ibmcloud.com/vulnerabilities/28955 oval:org.mitre.oval:def:11421 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11421 Common Vulnerability Exposure (CVE) ID: CVE-2006-4566 VU#141528 http://www.kb.cert.org/vuls/id/141528 mozilla-backslash-dos(28958) https://exchange.xforce.ibmcloud.com/vulnerabilities/28958 oval:org.mitre.oval:def:9637 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9637 Common Vulnerability Exposure (CVE) ID: CVE-2006-4567 1016850 http://securitytracker.com/id?1016850 1016851 http://securitytracker.com/id?1016851 http://www.mozilla.org/security/announce/2006/mfsa2006-58.html mozilla-auto-update-gain-access(28950) https://exchange.xforce.ibmcloud.com/vulnerabilities/28950 oval:org.mitre.oval:def:10488 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10488 Common Vulnerability Exposure (CVE) ID: CVE-2006-4568 1016855 http://securitytracker.com/id?1016855 1016856 http://securitytracker.com/id?1016856 http://www.mozilla.org/security/announce/2006/mfsa2006-61.html https://bugzilla.mozilla.org/show_bug.cgi?id=343168 mozilla-documentopen-frame-spoofing(28961) https://exchange.xforce.ibmcloud.com/vulnerabilities/28961 oval:org.mitre.oval:def:9843 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9843 Common Vulnerability Exposure (CVE) ID: CVE-2006-4569 1016849 http://securitytracker.com/id?1016849 firefox-popup-blocker-xss(28957) https://exchange.xforce.ibmcloud.com/vulnerabilities/28957 http://www.mozilla.org/security/announce/2006/mfsa2006-62.html oval:org.mitre.oval:def:10650 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10650 Common Vulnerability Exposure (CVE) ID: CVE-2006-4571 http://www.mozilla.org/security/announce/2006/mfsa2006-64.html oval:org.mitre.oval:def:11728 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11728
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.