Test ID:	1.3.6.1.4.1.25623.1.0.120465
Category:	Amazon Linux Local Security Checks
Title:	Amazon Linux: Security Advisory (ALAS-2013-268)
Summary:	The remote host is missing an update announced via the referenced Security Advisory.
Description:	Summary: The remote host is missing an update announced via the referenced Security Advisory. Vulnerability Insight: Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, which is processed by get_context.php. Solution: Run yum update ganglia to update your system. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6395 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730507 http://www.rusty-ice.de/advisory/advisory_2013002.txt https://github.com/ganglia/ganglia-web/issues/218 http://seclists.org/oss-sec/2013/q4/346 http://osvdb.org/100380 http://secunia.com/advisories/55854 XForce ISS Database: gangliaweb-cve20136395-xss(89272) https://exchange.xforce.ibmcloud.com/vulnerabilities/89272
Copyright	Copyright (C) 2015 Eero Volotinen

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.