Test ID:	1.3.6.1.4.1.25623.1.0.64310
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1822-1)
Summary:	The remote host is missing an update for the Debian 'mahara' package(s) announced via the DSA-1822-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'mahara' package(s) announced via the DSA-1822-1 advisory. Vulnerability Insight: It was discovered that mahara, an electronic portfolio, weblog, and resume builder is prone to several cross-site scripting attacks, which allow an attacker to inject arbitrary HTML or script code and steal potential sensitive data from other users. The oldstable distribution (etch) does not contain mahara. For the stable distribution (lenny), this problem has been fixed in version 1.0.4-4+lenny3. For the testing distribution (squeeze), this problem will be fixed soon. For the unstable distribution (sid), this problem has been fixed in version 1.1.5-1. We recommend that you upgrade your mahara packages. Affected Software/OS: 'mahara' package(s) on Debian 5. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2170
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.