|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Mandrake Local Security Checks >> MDKSA-2004:021: mozilla Vulnerability Assessment Details
|
MDKSA-2004:021: mozilla |
||
Check for the version of the mozilla package Detailed Explanation for this Vulnerability Assessment The remote host is missing the patch for the advisory MDKSA-2004:021 (mozilla). A number of vulnerabilities were discovered in Mozilla 1.4: A malicious website could gain access to a user's authentication credentials to a proxy server. Script.prototype.freeze/thaw could permit a possible hacker to run arbitrary code on your computer. A vulnerability was also discovered in the NSS security suite which ships with Mozilla. The S/MIME implementation would permit remote attackers to cause a Denial of Service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, which was demonstrated using the NISCC test suite. NSS version 3.9 corrects these problems and has been included in this package (which shipped with NSS 3.8). Finally, Corsaire discovered that a number of HTTP user agents contained a flaw in how they handle cookies. This flaw could permit a possible hacker to avoid the path restrictions specified by a cookie's originator. According to their advisory: 'The cookie specifications detail a path argument that can be used to restrict the areas of a host that will be exposed to a cookie. By using standard traversal techniques this functionality can be subverted, potentially exposing the cookie to scrutiny and use in further attacks.' As well, a bug with Mozilla and Finnish keyboards has been corrected. The updated packages are patched to correct these vulnerabilities. Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2004:021 Network Security Threat Level: High Networks Security ID: 8981, 9323 Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security |
||
Cables, Connectors |
Vintage Atari 800XL Computer *UNTESTED* No Power Cords Or Cables
$50.00
Vintage Atari 1040STf Computer with Mouse and Box, Minimal Testing, Pls Read
$149.99
Atari Power Cube 800XL, 600XL, 65XE, 130XE USB-C Power Supply PSU
$11.25
Atari 410 Program Cassette Recorder Clean Tested
$50.00
Atari 800 130XE 65XE Color S-Video, Composite Video and 2 Channel Audio Cable
$29.78
A8picoCart Atari 130 / 65 XE 800 / 1200 XL XEGS multicart UnoCart clone game
$32.95
Atari 400/800/XL/XE Computer SIO2PC - PC/Mac Disk Drive Emulator Adapter/Device
$15.25
Atari Mega STE or TT Keyboard. Used. Untested.
$300.00
ATARI Home Computers HOME FILING MANAGER Software **SEALED NEW** 1982
$25.00
TEAM TAP Atari Jaguar Multi Player Adapter NEW In Box
$25.46
|
||
No Discussions have been posted on this vulnerability. |