Test ID:	1.3.6.1.4.1.25623.1.0.62756
Category:	CentOS Local Security Checks
Title:	CentOS Security Advisory CESA-2005:384 (mozilla)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates to mozilla announced in advisory CESA-2005:384. For details on the issues addressed in this update, please visit the referenced security advisories. Solution: Update the appropriate packages on your system. http://www.securityspace.com/smysecure/catid.html?in=CESA-2005:384 http://www.securityspace.com/smysecure/catid.html?in=RHSA-2005:384 https://rhn.redhat.com/errata/RHSA-2005-384.html Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CAN-2004-1156 http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml http://secunia.com/multiple_browsers_window_injection_vulnerability_test/ http://secunia.com/secunia_research/2004-13/advisory/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100045 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10117 http://www.redhat.com/support/errata/RHSA-2005-176.html http://www.redhat.com/support/errata/RHSA-2005-384.html http://secunia.com/advisories/13129/ Common Vulnerability Exposure (CVE) ID: CAN-2005-0142 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100056 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9543 http://www.redhat.com/support/errata/RHSA-2005-335.html http://secunia.com/advisories/19823 SuSE Security Announcement: SUSE-SA:2006:022 (Google Search) http://www.novell.com/linux/security/advisories/2006_04_25.html XForce ISS Database: mozilla-world-readable(17832) https://exchange.xforce.ibmcloud.com/vulnerabilities/17832 Common Vulnerability Exposure (CVE) ID: CAN-2005-0143 BugTraq ID: 12407 http://www.securityfocus.com/bid/12407 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100055 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11297 XForce ISS Database: mozilla-ssl-spoofing(19166) https://exchange.xforce.ibmcloud.com/vulnerabilities/19166 Common Vulnerability Exposure (CVE) ID: CAN-2005-0146 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10362 XForce ISS Database: mozilla-middle-click-information-disclosure(19171) https://exchange.xforce.ibmcloud.com/vulnerabilities/19171 Common Vulnerability Exposure (CVE) ID: CAN-2005-0231 Bugtraq: 20050207 Firetabbing [Firefox 1.0] (Google Search) http://marc.info/?l=bugtraq&m=110781134617144&w=2 http://www.mikx.de/firetabbing/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100032 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10079 SuSE Security Announcement: SUSE-SA:2005:016 (Google Search) http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html XForce ISS Database: mozilla-firefox-tab-gain-access(19264) https://exchange.xforce.ibmcloud.com/vulnerabilities/19264 Common Vulnerability Exposure (CVE) ID: CAN-2005-0232 Bugtraq: 20050207 Fireflashing [Firefox 1.0] (Google Search) http://marc.info/?l=bugtraq&m=110781055630856&w=2 http://www.mikx.de/fireflashing/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10967 http://www.redhat.com/support/errata/RHSA-2005-323.html XForce ISS Database: mozilla-firefox-aboutconfig-modify(19266) https://exchange.xforce.ibmcloud.com/vulnerabilities/19266 Common Vulnerability Exposure (CVE) ID: CAN-2005-0233 12461 http://www.securityfocus.com/bid/12461 20050206 state of homograph attacks http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html 20050208 International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. http://marc.info/?l=bugtraq&m=110782704923280&w=2 GLSA-200503-10 GLSA-200503-30 RHSA-2005:176 RHSA-2005:384 SUSE-SA:2005:016 http://www.mozilla.org/security/announce/mfsa2005-29.html http://www.shmoo.com/idn http://www.shmoo.com/idn/homograph.txt multiple-browsers-idn-spoof(19236) https://exchange.xforce.ibmcloud.com/vulnerabilities/19236 oval:org.mitre.oval:def:100029 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100029 oval:org.mitre.oval:def:11229 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11229 Common Vulnerability Exposure (CVE) ID: CAN-2005-0401 12885 http://www.securityfocus.com/bid/12885 14654 http://secunia.com/advisories/14654 20050324 Firescrolling 2 [Firefox 1.0.1] http://marc.info/?l=bugtraq&m=111168413007891&w=2 ADV-2005-0296 http://www.vupen.com/english/advisories/2005/0296 RHSA-2005:335 RHSA-2005:336 http://www.redhat.com/support/errata/RHSA-2005-336.html http://mikx.de/firescrolling2/ http://www.mozilla.org/security/announce/mfsa2005-32.html oval:org.mitre.oval:def:100026 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100026 oval:org.mitre.oval:def:9650 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9650
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.