Test Kennung:	1.3.6.1.4.1.25623.1.0.52956
Kategorie:	Turbolinux Local Security Tests
Titel:	Turbolinux TLSA-2003-49 (perl)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to perl announced via advisory TLSA-2003-49. Perl is a high-level programming language with roots in C, sed, awk and shell scripting. A cross-site scripting vulnerability exists in the start_form() function from CGI.pm This vulnerability may allow an attacker to execute arbitrary web script within the context of the generated page. Solution: Please use the turbopkg (zabom) tool to apply the update. https://secure1.securityspace.com/smysecure/catid.html?in=TLSA-2003-49 Risk factor : Medium CVSS Score: 4.3
Querverweis:	BugTraq ID: 8231 Common Vulnerability Exposure (CVE) ID: CVE-2003-0615 http://www.securityfocus.com/bid/8231 Bugtraq: 20030720 CGI.pm vulnerable to Cross-site Scripting (Google Search) http://marc.info/?l=bugtraq&m=105880349328877&w=2 Bugtraq: 20030806 [OpenPKG-SA-2003.036] OpenPKG Security Advisory (perl-www) (Google Search) http://marc.info/?l=bugtraq&m=106018783704468&w=2 CERT/CC vulnerability note: VU#246409 http://www.kb.cert.org/vuls/id/246409 Computer Incident Advisory Center Bulletin: N-155 http://www.ciac.org/ciac/bulletins/n-155.shtml Conectiva Linux advisory: CLA-2003:713 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000713 Debian Security Information: DSA-371 (Google Search) http://www.debian.org/security/2003/dsa-371 http://marc.info/?l=full-disclosure&m=105875211018698&w=2 http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2003:084 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A307 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A470 http://www.redhat.com/support/errata/RHSA-2003-256.html SCO Security Bulletin: CSSA-2003-SCO.30 http://securitytracker.com/id?1007234 http://secunia.com/advisories/13638 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101426-1 XForce ISS Database: cgi-startform-xss(12669) https://exchange.xforce.ibmcloud.com/vulnerabilities/12669
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.