Test ID:	1.3.6.1.4.1.25623.1.0.68747
Category:	Fedora Local Security Checks
Title:	Fedora Core 14 FEDORA-2010-18981 (git)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to git announced via advisory FEDORA-2010-18981. Update Information: Update to 1.7.3.4 release which fixes various issues, notably: * cross-site scripting (XSS) flaw was found in the web interface of Git distributed revision control system. A remote attacker could use this flaw to execute arbitrary HTML or scripting code by providing a certain URL with specially-crafted values of f and fp variables. (CVE-2010-3906) References: [ 1 ] Bug #663609 - CVE-2010-3906 Git (gitweb): XSS due to missing escaping of HTML element attributes https://bugzilla.redhat.com/show_bug.cgi?id=663609 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update git' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2010-18981 Risk factor : Medium CVSS Score: 4.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3906 BugTraq ID: 45439 http://www.securityfocus.com/bid/45439 http://www.exploit-db.com/exploits/15744 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052782.html http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052518.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:256 http://www.redhat.com/support/errata/RHSA-2010-1003.html http://www.securitytracker.com/id?1024905 http://secunia.com/advisories/42645 http://secunia.com/advisories/42731 http://secunia.com/advisories/42743 http://secunia.com/advisories/43457 SuSE Security Announcement: SUSE-SR:2011:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html http://www.vupen.com/english/advisories/2010/3323 http://www.vupen.com/english/advisories/2011/0010 http://www.vupen.com/english/advisories/2011/0464
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.