ID de Prueba:	1.3.6.1.4.1.25623.1.0.123977
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2012-0151)
Resumen:	The remote host is missing an update for the 'conga' package(s) announced via the ELSA-2012-0151 advisory.
Descripción:	Summary: The remote host is missing an update for the 'conga' package(s) announced via the ELSA-2012-0151 advisory. Vulnerability Insight: [0.12.2-51.0.1.el5] - Added conga-enterprise.patch - Added conga-enterprise-Carthage.patch to support OEL5 - Replaced redhat logo image in conga-0.12.2.tar.gz [0.12.2-51] - Fix bz711494 (CVE-2011-1948 plone: reflected XSS vulnerability) - Fix bz771920 (CVE-2011-4924 Zope: Incomplete upstream patch for CVE-2010-1104/bz577019) [0.12.2-45] - Fix bz751359 (Add luci support for fence_ipmilan's -L option) [0.12.2-44] - Fix bz577019 (CVE-2010-1104 zope: XSS on error page) [0.12.2-42] - Fix bz755935 (luci_admin man page is misleading) - Fix bz755941 (luci_admin restore is not consistent) [0.12.2-40] - Fix excluding busy nodes not working properly in luci internals. [0.12.2-38] - Additional fix for bz734562 (Improve Luci's resource name validation) [0.12.2-37] - Additional fix for bz734562 (Improve Luci's resource name validation) [0.12.2-36] - Bump version of the luci database. [0.12.2-35] - Fix bz739600 (conga allows erroneous characters in resource) - Fix bz734562 (Improve Luci's resource name validation) [0.12.2-34] - Fix bz709478 (Ricci fails to detect if host if virtual machine capable) - Fix bz723000 (Modifying an existing shared resource will not update the reference in the cluster.conf) - Fix bz723188 (Luci does not allow to modify __max_restarts and __restart_expire_time for independent subtrees, only for non-critical resources) [0.12.2-33] - Fix bz732483 (Create new cluster fails with luci when installing packages.) Affected Software/OS: 'conga' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1104 BugTraq ID: 37765 http://www.securityfocus.com/bid/37765 https://mail.zope.org/pipermail/zope-announce/2010-January/002229.html http://www.osvdb.org/61655 http://secunia.com/advisories/38007 http://www.vupen.com/english/advisories/2010/0104 XForce ISS Database: zope-standarderrormessage-xss(55599) https://exchange.xforce.ibmcloud.com/vulnerabilities/55599 Common Vulnerability Exposure (CVE) ID: CVE-2011-1948 20110526 [CVE-REQUEST] Plone XSS and permission errors http://www.securityfocus.com/archive/1/518155/100/0/threaded 44775 http://secunia.com/advisories/44775 44776 http://secunia.com/advisories/44776 48005 http://www.securityfocus.com/bid/48005 72727 http://osvdb.org/72727 8269 http://securityreason.com/securityalert/8269 http://plone.org/products/plone/security/advisories/CVE-2011-1948 plone-unspec-xss(67693) https://exchange.xforce.ibmcloud.com/vulnerabilities/67693
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.