|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Mandrake Local Security Checks >> MDKSA-2004:021: mozilla Vulnerability Assessment Details
|
MDKSA-2004:021: mozilla |
||
Check for the version of the mozilla package Detailed Explanation for this Vulnerability Assessment The remote host is missing the patch for the advisory MDKSA-2004:021 (mozilla). A number of vulnerabilities were discovered in Mozilla 1.4: A malicious website could gain access to a user's authentication credentials to a proxy server. Script.prototype.freeze/thaw could permit a possible hacker to run arbitrary code on your computer. A vulnerability was also discovered in the NSS security suite which ships with Mozilla. The S/MIME implementation would permit remote attackers to cause a Denial of Service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, which was demonstrated using the NISCC test suite. NSS version 3.9 corrects these problems and has been included in this package (which shipped with NSS 3.8). Finally, Corsaire discovered that a number of HTTP user agents contained a flaw in how they handle cookies. This flaw could permit a possible hacker to avoid the path restrictions specified by a cookie's originator. According to their advisory: 'The cookie specifications detail a path argument that can be used to restrict the areas of a host that will be exposed to a cookie. By using standard traversal techniques this functionality can be subverted, potentially exposing the cookie to scrutiny and use in further attacks.' As well, a bug with Mozilla and Finnish keyboards has been corrected. The updated packages are patched to correct these vulnerabilities. Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2004:021 Network Security Threat Level: High Networks Security ID: 8981, 9323 Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security |
||
Cables, Connectors |
WD_BLACK 1TB 2.5-inch Performance Hard Drive - WD10SPSX
$69.99
SanDisk 1TB Ultra Dual Drive Go USB Type-C Flash Drive, Black - SDDDC3-1T00-G46
$109.99
WD_BLACK 1TB D30 Game Drive SSD for Xbox Summer Collection - WDBAMF0010BSU-WESN
$109.99
Western Digital 1TB WD Blue PC Desktop 3.5'' Internal CMR Hard Drive - WD10EARZ
$44.99
Patriot P210 128GB 256GB 512GB 1TB 2TB 2.5" SATA 3 6GB/s Internal SSD PC/MAC Lot
$19.99
Samsung - Geek Squad Certified Refurbished 870 EVO 1TB SATA Solid State Drive
$67.99
1TB Samsung 850 Pro Series 2.5" SATA 3 SSD MZ-7KE1T0BW HDD hard drive MZ-7KE1T0
$59.99
Samsung 1TB ST1000LM024 2.5" SATA Hard Drive
$12.99
Toshiba DT01ABA100V 3.5" SATA Internal Hard Drive 1TB Tested/Wiped
$15.00
1TB/2TB USB 3.0 Flash Drive Thumb U Disk Memory Stick Pen PC Laptop Storage lot
$80.39
|
||
No Discussions have been posted on this vulnerability. |