Test ID:	1.3.6.1.4.1.25623.1.0.66267
Category:	Fedora Local Security Checks
Title:	Fedora Core 11 FEDORA-2009-11491 (qt)
Summary:	The remote host is missing an update to qt;announced via advisory FEDORA-2009-11491.;Note: This VT has been deprecated and is therefore no longer functional.
Description:	Summary: The remote host is missing an update to qt announced via advisory FEDORA-2009-11491. Note: This VT has been deprecated and is therefore no longer functional. Vulnerability Insight: Update Information: A security flaw was found in the WebKit's Cross-Origin Resource Sharing (CORS) implementation. Multiple security flaws (integer underflow, invalid pointer dereference, buffer underflow and a denial of service) were found in the way WebKit's FTP parser used to process remote FTP directory listings. ChangeLog: * Thu Nov 12 2009 Jaroslav Reznik - 4.5.3-9 - CVE-2009-3384 - WebKit, ftp listing handling (#525788) - CVE-2009-2816 - WebKit, MITM Cross-Origin Resource Sharing (#525789) * Sun Nov 8 2009 Rex Dieter - 4.5.3-8 - -x11: Requires: %{name}-sqlite(ppc-32) Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update qt' at the command line. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3384 http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html BugTraq ID: 36995 http://www.securityfocus.com/bid/36995 https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html http://osvdb.org/59943 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362 http://www.securitytracker.com/id?1023166 http://secunia.com/advisories/37346 http://secunia.com/advisories/37393 http://secunia.com/advisories/37397 http://secunia.com/advisories/43068 SuSE Security Announcement: SUSE-SR:2011:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://www.vupen.com/english/advisories/2009/3217 http://www.vupen.com/english/advisories/2011/0212 XForce ISS Database: safari-ftp-code-execution(54241) https://exchange.xforce.ibmcloud.com/vulnerabilities/54241 Common Vulnerability Exposure (CVE) ID: CVE-2009-2816 http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html BugTraq ID: 36997 http://www.securityfocus.com/bid/36997 http://osvdb.org/59940 http://osvdb.org/59967 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6516 http://www.securitytracker.com/id?1023165 http://secunia.com/advisories/37358 http://www.vupen.com/english/advisories/2009/3233 XForce ISS Database: safari-crossorigin-csrf(54239) https://exchange.xforce.ibmcloud.com/vulnerabilities/54239 Common Vulnerability Exposure (CVE) ID: CVE-2009-2700 BugTraq ID: 36203 http://www.securityfocus.com/bid/36203 http://www.mandriva.com/security/advisories?name=MDVSA-2009:225 http://secunia.com/advisories/36536 http://secunia.com/advisories/36702 http://www.ubuntu.com/usn/usn-829-1 http://www.vupen.com/english/advisories/2009/2499 Common Vulnerability Exposure (CVE) ID: CVE-2009-1725 http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html BugTraq ID: 35607 http://www.securityfocus.com/bid/35607 Debian Security Information: DSA-1950 (Google Search) http://www.debian.org/security/2009/dsa-1950 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00931.html https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00933.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:330 http://osvdb.org/55739 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5777 http://www.securitytracker.com/id?1022526 http://secunia.com/advisories/35758 http://secunia.com/advisories/36057 http://secunia.com/advisories/36062 http://secunia.com/advisories/36347 http://secunia.com/advisories/36677 http://secunia.com/advisories/36790 http://secunia.com/advisories/37746 http://www.ubuntu.com/usn/USN-836-1 http://www.ubuntu.com/usn/USN-857-1 http://www.vupen.com/english/advisories/2009/1827
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.