Test Kennung:	1.3.6.1.4.1.25623.1.0.68584
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Security Advisory MDVSA-2010:256 (git)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to git announced via advisory MDVSA-2010:256. A vulnerability was discovered and corrected in git (gitweb): A cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and previous versions allows remote attackers to inject arbitrary web script or HTML code via f and fp variables (CVE-2010-3906). The updated packages have been patched to correct this issue. Affected: 2010.0, 2010.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2010:256 Risk factor : Medium CVSS Score: 4.3
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3906 BugTraq ID: 45439 http://www.securityfocus.com/bid/45439 http://www.exploit-db.com/exploits/15744 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052782.html http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052518.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:256 http://www.redhat.com/support/errata/RHSA-2010-1003.html http://www.securitytracker.com/id?1024905 http://secunia.com/advisories/42645 http://secunia.com/advisories/42731 http://secunia.com/advisories/42743 http://secunia.com/advisories/43457 SuSE Security Announcement: SUSE-SR:2011:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html http://www.vupen.com/english/advisories/2010/3323 http://www.vupen.com/english/advisories/2011/0010 http://www.vupen.com/english/advisories/2011/0464
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.