Test ID:	1.3.6.1.4.1.25623.1.0.69950
Category:	Fedora Local Security Checks
Title:	Fedora Core 15 FEDORA-2011-9311 (squirrelmail)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to squirrelmail announced via advisory FEDORA-2011-9311. Update Information: fixes: - CVE-2011-2023 : Messages containing style tags with malicious script attributes were being displayed without being sanitized - CVE-2010-4555 : An attacker could use one of several small bugs in SquirrelMail to inject malicious script into various pages or alter the contents of user preferences - CVE-2010-4554 : SquirrelMail is vulnerable to clickjacking attacks wherein the entire application can be loaded in a frame that could overlay other elements on top of SquirrelMail References: [ 1 ] Bug #720693 - CVE-2010-4554 SquirrelMail: Prone to clickjacking attacks https://bugzilla.redhat.com/show_bug.cgi?id=720693 [ 2 ] Bug #720694 - CVE-2010-4555 SquirrelMail: Multiple XSS flaws https://bugzilla.redhat.com/show_bug.cgi?id=720694 [ 3 ] Bug #720695 - CVE-2011-2023 SquirrelMail: XSS in tag handling https://bugzilla.redhat.com/show_bug.cgi?id=720695 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update squirrelmail' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2011-9311 Risk factor : Medium CVSS Score: 4.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2023 http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html Debian Security Information: DSA-2291 (Google Search) http://www.debian.org/security/2011/dsa-2291 http://www.mandriva.com/security/advisories?name=MDVSA-2011:123 RedHat Security Advisories: RHSA-2012:0103 http://rhn.redhat.com/errata/RHSA-2012-0103.html http://securitytracker.com/id?1025766 Common Vulnerability Exposure (CVE) ID: CVE-2010-4555 XForce ISS Database: squirrelmail-dropdown-xss(68510) https://exchange.xforce.ibmcloud.com/vulnerabilities/68510 XForce ISS Database: squirrelmail-spellchecking-xss(68511) https://exchange.xforce.ibmcloud.com/vulnerabilities/68511 Common Vulnerability Exposure (CVE) ID: CVE-2010-4554 XForce ISS Database: squirrelmail-http-clickjacking(68512) https://exchange.xforce.ibmcloud.com/vulnerabilities/68512
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.