Detections
Analytics

FreeBSD : phpmyfaq -- multiple vulnerabilities (4dd575b8-8f82-11e3-bb11-0025905a4771)

medium Nessus Plugin ID 72382

Language:

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

The phpMyFAQ team reports :

An arbitrary script may be executed on the user's Internet Explorer when using an older version of the browser. If a user views a malicious page while logged in, settings may be changed unintentionally.

Solution

Update the affected package.

See Also

https://www.phpmyfaq.de/news/04

http://www.nessus.org/u?b5227bd9

Plugin Details

Severity: Medium

ID: 72382

File Name: freebsd_pkg_4dd575b88f8211e3bb110025905a4771.nasl

Version: 1.7

Type: local

Published: 2/7/2014

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:phpmyfaq, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2/6/2014

Vulnerability Publication Date: 2/4/2014

Reference Information

CVE: CVE-2014-0813, CVE-2014-0814