OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[SA12742] Mozilla Application Suite for Tru64 UNIX Multiple Vulnerabilities

From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Oct 06 2004 - 08:20:33 CDT


TITLE:
Mozilla Application Suite for Tru64 UNIX Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA12742

VERIFY ADVISORY:
http://secunia.com/advisories/12742/

CRITICAL:
Highly critical

IMPACT:
Cross Site Scripting, Manipulation of data, Exposure of sensitive
information, System access

WHERE:
From remote

SOFTWARE:
Mozilla Application Suite for Tru64 UNIX 1.x
http://secunia.com/product/3767/

DESCRIPTION:
HP has confirmed some vulnerabilities in the Mozilla Application
Suite for Tru64 UNIX, which can be exploited to conduct cross-site
scripting attacks, access and modify sensitive information, and
compromise a user's system.

The vulnerabilities affect versions prior to 1.7.3.

For more information:
SA12526

SOLUTION:
Update to version 1.7.3.
http://h30097.www3.hp.com/internet/download.htm

ORIGINAL ADVISORY:
SSRT4826:
http://www4.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01081

OTHER REFERENCES:
SA12526:
http://secunia.com/advisories/12526/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------