Test ID:	1.3.6.1.4.1.25623.1.0.64575
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-811-1)
Summary:	The remote host is missing an update for the 'firefox-3.0, xulrunner-1.9' package(s) announced via the USN-811-1 advisory.
Description:	Summary: The remote host is missing an update for the 'firefox-3.0, xulrunner-1.9' package(s) announced via the USN-811-1 advisory. Vulnerability Insight: Juan Pablo Lopez Yacubian discovered that Firefox did not properly display invalid URLs. If a user were tricked into accessing a malicious website, an attacker could exploit this to spoof the location bar, such as in a phishing attack. Furthermore, if the malicious website had a valid SSL certificate, Firefox would display the spoofed page as trusted. Affected Software/OS: 'firefox-3.0, xulrunner-1.9' package(s) on Ubuntu 8.04, Ubuntu 8.10, Ubuntu 9.04. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2654 BugTraq ID: 35803 http://www.securityfocus.com/bid/35803 Bugtraq: 20090724 URL spoofing bug involving Firefox's error pages and document.write (Google Search) http://www.securityfocus.com/archive/1/505242/30/0/threaded Bugtraq: 20090727 Re: URL spoofing bug involving Firefox's error pages and document.write (Google Search) http://www.securityfocus.com/archive/1/505265 Debian Security Information: DSA-1873 (Google Search) http://www.debian.org/security/2009/dsa-1873 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html http://es.geocities.com/jplopezy/firefoxspoofing.html http://osvdb.org/56717 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9686 http://www.redhat.com/support/errata/RHSA-2009-1430.html http://www.redhat.com/support/errata/RHSA-2009-1431.html http://www.redhat.com/support/errata/RHSA-2009-1432.html http://www.securitytracker.com/id?1022603 http://secunia.com/advisories/36001 http://secunia.com/advisories/36126 http://secunia.com/advisories/36141 http://secunia.com/advisories/36435 http://secunia.com/advisories/36669 http://secunia.com/advisories/36670 http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 https://usn.ubuntu.com/811-1/ http://www.vupen.com/english/advisories/2009/2006 http://www.vupen.com/english/advisories/2009/2142
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.