---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secunia_vacancies/ ---------------------------------------------------------------------- TITLE: Red Hat update for mozilla SECUNIA ADVISORY ID: SA15180 VERIFY ADVISORY: http://secunia.com/advisories/15180/ CRITICAL: Highly critical IMPACT: Cross Site Scripting, Spoofing, Manipulation of data, Exposure of system information, Exposure of sensitive information, Privilege escalation, System access, Security Bypass WHERE: >From remote OPERATING SYSTEM: RedHat Linux Advanced Workstation 2.1 for Itanium http://secunia.com/product/1326/ RedHat Linux Advanced Server 2.1 for Itanium http://secunia.com/product/1327/ RedHat Enterprise Linux WS 3 http://secunia.com/product/2536/ RedHat Enterprise Linux WS 2.1 http://secunia.com/product/1044/ RedHat Enterprise Linux ES 3 http://secunia.com/product/2535/ RedHat Enterprise Linux ES 2.1 http://secunia.com/product/1306/ RedHat Enterprise Linux AS 3 http://secunia.com/product/2534/ RedHat Enterprise Linux AS 2.1 http://secunia.com/product/48/ DESCRIPTION: Red Hat has issued an update for mozilla. This fixes some vulnerabilities, which can be exploited by malicious, local users to gain knowledge of sensitive information and perform certain actions on a vulnerable system with escalated privileges and by malicious people to conduct spoofing and cross-site scripting attacks, disclose sensitive and system information, bypass certain security restrictions, trick users into downloading malicious files and compromise a user's system. For more information: SA12956 SA13129 SA13258 SA13599 SA14017 SA14160 SA14163 SA14407 SA14684 SA14821 SA14992 SOLUTION: Updated packages are available from Red Hat Network. http://rhn.redhat.com/ ORIGINAL ADVISORY: http://rhn.redhat.com/errata/RHSA-2005-384.html OTHER REFERENCES: SA12956: http://secunia.com/advisories/12956/ SA13129: http://secunia.com/advisories/13129/ SA13258: http://secunia.com/advisories/13258/ SA13599: http://secunia.com/advisories/13599/ SA14017: http://secunia.com/advisories/14017/ SA14160: http://secunia.com/advisories/14160/ SA14163: http://secunia.com/advisories/14163/ SA14407: http://secunia.com/advisories/14407/ SA14684: http://secunia.com/advisories/14684/ SA14821: http://secunia.com/advisories/14821/ SA14992: http://secunia.com/advisories/14992/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------