Test ID:	1.3.6.1.4.1.25623.1.0.840000
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-420-1)
Summary:	The remote host is missing an update for the 'kdelibs' package(s) announced via the USN-420-1 advisory.
Description:	Summary: The remote host is missing an update for the 'kdelibs' package(s) announced via the USN-420-1 advisory. Vulnerability Insight: Jose Avila III and Robert Tasarz discovered that the KDE HTML library did not correctly parse HTML comments inside the 'title' tag. By tricking a Konqueror user into visiting a malicious website, an attacker could bypass cross-site scripting protections. Affected Software/OS: 'kdelibs' package(s) on Ubuntu 5.10, Ubuntu 6.06, Ubuntu 6.10. Solution: Please install the updated package(s). CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0537 BugTraq ID: 22428 http://www.securityfocus.com/bid/22428 Bugtraq: 20070124 Re: Safari Improperly Parses HTML Documents & BlogSpot XSS vulnerability (Google Search) http://www.securityfocus.com/archive/1/457924/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200703-10.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:031 http://www.mandriva.com/security/advisories?name=MDKSA-2007:157 http://osvdb.org/32975 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10244 http://www.redhat.com/support/errata/RHSA-2007-0909.html http://securitytracker.com/id?1017591 http://secunia.com/advisories/23932 http://secunia.com/advisories/24013 http://secunia.com/advisories/24065 http://secunia.com/advisories/24442 http://secunia.com/advisories/24463 http://secunia.com/advisories/24889 http://secunia.com/advisories/27108 SuSE Security Announcement: SUSE-SR:2007:006 (Google Search) http://www.novell.com/linux/security/advisories/2007_6_sr.html http://www.ubuntu.com/usn/usn-420-1 http://www.vupen.com/english/advisories/2007/0505
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.