Detections
Analytics
Fedora 10 : Miro-2.0.5-5.fc10 / blam-1.8.5-15.fc10 / epiphany-2.24.3-11.fc10 / etc (2009-10981)
critical Nessus Plugin ID 42383
Synopsis
The remote Fedora host is missing one or more security updates.Description
Update to new upstream Firefox version 3.0.15, fixing multiple security issues detailed in the upstream advisories:http://www.mozilla.org/security/known- vulnerabilities/firefox30.html#firefox3.0.15 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Solution
Update the affected packages.See Also
https://www.mozilla.org/en-US/security/known-
https://bugzilla.redhat.com/show_bug.cgi?id=524815
https://bugzilla.redhat.com/show_bug.cgi?id=530151
https://bugzilla.redhat.com/show_bug.cgi?id=530155
https://bugzilla.redhat.com/show_bug.cgi?id=530156
https://bugzilla.redhat.com/show_bug.cgi?id=530157
https://bugzilla.redhat.com/show_bug.cgi?id=530162
https://bugzilla.redhat.com/show_bug.cgi?id=530167
https://bugzilla.redhat.com/show_bug.cgi?id=530168
https://bugzilla.redhat.com/show_bug.cgi?id=530567
https://bugzilla.redhat.com/show_bug.cgi?id=530569
http://www.nessus.org/u?71282852
http://www.nessus.org/u?6a9e9ccc
http://www.nessus.org/u?495f6c34
http://www.nessus.org/u?6df7dccd
http://www.nessus.org/u?9405d31b
http://www.nessus.org/u?8b4f63c9
http://www.nessus.org/u?4cc43fc7
http://www.nessus.org/u?bb83670b
http://www.nessus.org/u?32590090
http://www.nessus.org/u?805b9cb9
http://www.nessus.org/u?a8e8d8cd
http://www.nessus.org/u?dd0643f6
http://www.nessus.org/u?c53043c5
http://www.nessus.org/u?d2f47676
http://www.nessus.org/u?bb04f81f
http://www.nessus.org/u?c45a42f1
http://www.nessus.org/u?524d8492
Plugin Details
Severity: Critical
ID: 42383
File Name: fedora_2009-10981.nasl
Version: 1.23
Type: local
Agent: unix
Family: Fedora Local Security Checks
Published: 11/5/2009
Updated: 1/11/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:fedoraproject:fedora:epiphany-extensions, p-cpe:/a:fedoraproject:fedora:blam, cpe:/o:fedoraproject:fedora:10, p-cpe:/a:fedoraproject:fedora:yelp, p-cpe:/a:fedoraproject:fedora:miro, p-cpe:/a:fedoraproject:fedora:pcmanx-gtk2, p-cpe:/a:fedoraproject:fedora:xulrunner, p-cpe:/a:fedoraproject:fedora:evolution-rss, p-cpe:/a:fedoraproject:fedora:perl-gtk2-mozembed, p-cpe:/a:fedoraproject:fedora:galeon, p-cpe:/a:fedoraproject:fedora:gecko-sharp2, p-cpe:/a:fedoraproject:fedora:mugshot, p-cpe:/a:fedoraproject:fedora:gnome-python2-extras, p-cpe:/a:fedoraproject:fedora:epiphany, p-cpe:/a:fedoraproject:fedora:ruby-gnome2, p-cpe:/a:fedoraproject:fedora:google-gadgets, p-cpe:/a:fedoraproject:fedora:kazehakase, p-cpe:/a:fedoraproject:fedora:gnome-web-photo, p-cpe:/a:fedoraproject:fedora:mozvoikko, p-cpe:/a:fedoraproject:fedora:firefox
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 11/4/2009
Vulnerability Publication Date: 9/21/2009
Reference Information
CVE: CVE-2009-0689, CVE-2009-3274, CVE-2009-3370, CVE-2009-3372, CVE-2009-3373, CVE-2009-3374, CVE-2009-3375, CVE-2009-3376, CVE-2009-3380, CVE-2009-3382
BID: 36851, 36852, 36853, 36855, 36856, 36857, 36858, 36866, 36867, 36871
FEDORA: 2009-10981