Detections
Analytics
openSUSE 10 Security Update : epiphany (epiphany-5102)
high Nessus Plugin ID 31622
Synopsis
The remote openSUSE host is missing a security update.Description
The Mozilla XULRunner 1.8.1 engine was updated to security update version 1.8.1.12.This includes fixes for the following security issues :
- MFSA 2008-10/CVE-2008-0593 URL token stealing via stylesheet redirect
- MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved plain text files
- MFSA 2008-06/CVE-2008-0419 Web browsing history and forward navigation stealing
- MFSA 2008-05/CVE-2008-0418 Directory traversal via chrome: URI
- MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS, Remote Code Execution
- MFSA 2008-02/CVE-2008-0414 Multiple file input focus stealing vulnerabilities
- MFSA 2008-01/CVE-2008-0412 Crashes with evidence of memory corruption (rv:1.8.1.12)
Solution
Update the affected epiphany packages.Plugin Details
Severity: High
ID: 31622
File Name: suse_epiphany-5102.nasl
Version: 1.10
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 3/19/2008
Updated: 1/14/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:novell:opensuse:mozilla-xulrunner181-devel, p-cpe:/a:novell:opensuse:mozilla-xulrunner181-l10n, cpe:/o:novell:opensuse:10.2, cpe:/o:novell:opensuse:10.3, p-cpe:/a:novell:opensuse:epiphany, p-cpe:/a:novell:opensuse:epiphany-devel, p-cpe:/a:novell:opensuse:epiphany-extensions, p-cpe:/a:novell:opensuse:mozilla-xulrunner181, p-cpe:/a:novell:opensuse:mozilla-xulrunner181-32bit
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 3/14/2008
Reference Information
CVE: CVE-2008-0412, CVE-2008-0414, CVE-2008-0415, CVE-2008-0418, CVE-2008-0419, CVE-2008-0592, CVE-2008-0593