FreeBSD : mozilla -- multiple vulnerabilities (84630f4a-cd8c-11da-b7b9-000c6ec775d9)

NASLDB: FreeBSD : mozilla -- multiple vulnerabilities (84630f4a-cd8c-11da-b7b9-000c6ec775d9)

General

ID: 21461
Name: FreeBSD : mozilla — multiple vulnerabilities (84630f4a-cd8c-11da-b7b9-000c6ec775d9)

Summary: Checks for updated packages in pkg_info output

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: –

Port: 0
Family: FreeBSD Local Security Checks
Type: Local

Description

A Mozilla Foundation Security Advisory reports of multiple issues.
Several of which can be used to run arbitrary code with the privilege
of the user running the program.

– MFSA 2006-29 Spoofing with translucent windows

– MFSA 2006-28 Security check of js_ValueToFunctionObject() can be
circumvented

– MFSA 2006-26 Mail Multiple Information Disclosure

– MFSA 2006-25 Privilege escalation through Print Preview

– MFSA 2006-24 Privilege escalation using crypto.generateCRMFRequest

– MFSA 2006-23 File stealing by changing input type

– MFSA 2006-22 CSS Letter-Spacing Heap Overflow Vulnerability

– MFSA 2006-20 Crashes with evidence of memory corruption (rv:1.8.0.2)

– MFSA 2006-19 Cross-site scripting using .valueOf.call()

– MFSA 2006-18 Mozilla Firefox Tag Order Vulnerability

– MFSA 2006-17 cross-site scripting through window.controllers

– MFSA 2006-16 Accessing XBL compilation scope via valueOf.call()

– MFSA 2006-15 Privilege escalation using a JavaScript function’s
cloned parent

– MFSA 2006-14 Privilege escalation via XBL.method.eval

– MFSA 2006-13 Downloading executables with ‘Save Image As…’

– MFSA 2006-12 Secure-site spoof (requires security warning dialog)

– MFSA 2006-11 Crashes with evidence of memory corruption (rv:1.8)

– MFSA 2006-10 JavaScript garbage-collection hazard audit

– MFSA 2006-09 Cross-site JavaScript injection using event handlers

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2006-0749
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2006/04/13
Patch Release: 2006/04/16
Plugin Release: 2006/05/13

Plugin

Version: 1.9
Filename: freebsd_pkg_84630f4acd8c11dab7b9000c6ec775d9.nasl
Filesize: 9564 bytes
MD5 Hash: 556535e816689ccc5010402d29b85f40

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG