Test ID:	1.3.6.1.4.1.25623.1.0.67703
Category:	Fedora Local Security Checks
Title:	Fedora Core 12 FEDORA-2010-10433 (mono)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to mono announced via advisory FEDORA-2010-10433. ChangeLog: * Thu Jun 24 2010 Christian Krause - 2.4.3.1-2 - Add upstream patch for CVE-2010-1459: http://anonsvn.mono-project.com/viewvc?view=revision&revision=156450 * Wed Jan 13 2010 Christian Krause - 2.4.3.1-1 - Update to 2.4.3.1 * Wed Dec 23 2009 Christian Krause - 2.4.3-1 - Update to 2.4.3 - Drop mono-242-metadata-appconf.patch (fixed upstream) - package mono.snk for packages without bundled keys to use - put mono.snk in /etc/pki/mono/ - package /etc/pki/mono/* in mono-devel - change %gac_dll macro to be more specific about the files to package (necessary to correctly select all files for the moonlight subpackage without any dangling symlinks) References: [ 1 ] Bug #598155 - CVE-2010-1459 Mono: View State Cross-Site Scripting https://bugzilla.redhat.com/show_bug.cgi?id=598155 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update mono' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2010-10433 Risk factor : Medium CVSS Score: 4.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1459 BugTraq ID: 40351 http://www.securityfocus.com/bid/40351 http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2010/04/29/asp-net-cross-site-scripting-followup-mono.aspx SuSE Security Announcement: SUSE-SR:2010:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html SuSE Security Announcement: SUSE-SR:2010:013 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html SuSE Security Announcement: SUSE-SR:2010:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.