----------------------------------------------------------------------

Want to work within IT-Security?

Secunia is expanding its team of highly skilled security experts.
We will help with relocation and obtaining a work permit.

Currently the following type of positions are available:
http://secunia.com/quality_assurance_analyst/
http://secunia.com/web_application_security_specialist/ 
http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
Mandriva update for mozilla-firefox

SECUNIA ADVISORY ID:
SA22001

VERIFY ADVISORY:
http://secunia.com/advisories/22001/

CRITICAL:
Highly critical

IMPACT:
Security Bypass, Cross Site Scripting, Spoofing, DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
Mandriva Linux 2006
http://secunia.com/product/9020/

DESCRIPTION:
Mandriva has issued an update for mozilla-firefox. This fixes some
vulnerabilities, which can be exploited by malicious people to
conduct man-in-the-middle, spoofing, and cross-site scripting
attacks, and potentially compromise a user's system.

For more information:
SA21906

SOLUTION:
Apply updated packages.

Mandriva Linux 2006.0

4e750ef25e44a1b493d2a61ad5f9a7a2
2006.0/i586/devhelp-0.10-7.2.20060mdk.i586.rpm
e6cd690c11d4e8f352d2ce7bf0f7d4be
2006.0/i586/epiphany-1.8.5-4.2.20060mdk.i586.rpm
b2f094942eca657f3dc7a8699cb8b776
2006.0/i586/epiphany-devel-1.8.5-4.2.20060mdk.i586.rpm
c4ae8fc253aa1fe055ec4c1560205fab
2006.0/i586/epiphany-extensions-1.8.2-3.2.20060mdk.i586.rpm
08cde29a26e6ac2d0e3b629f660db9fe
2006.0/i586/galeon-2.0.1-1.2.20060mdk.i586.rpm
9c94b904a9f2c64090328edd73d0e1fa
2006.0/i586/libdevhelp-1_0-0.10-7.2.20060mdk.i586.rpm
b5ad67818794371f50d63a611c79b45b
2006.0/i586/libdevhelp-1_0-devel-0.10-7.2.20060mdk.i586.rpm
fe0707524f8f3b4e1dcfe80c8bec0190
2006.0/i586/libnspr4-1.5.0.7-0.1.20060mdk.i586.rpm
770e8d6c5643c78f486ae2c115f7c740
2006.0/i586/libnspr4-devel-1.5.0.7-0.1.20060mdk.i586.rpm
ffb123d21760cbba92a232dfb1150b7e
2006.0/i586/libnspr4-static-devel-1.5.0.7-0.1.20060mdk.i586.rpm
fafbff86e6f1d44b7d1ad3e5f1f24860
2006.0/i586/libnss3-1.5.0.7-0.1.20060mdk.i586.rpm
41c8df68fb4c2d8d37440d1dea73f8c6
2006.0/i586/libnss3-devel-1.5.0.7-0.1.20060mdk.i586.rpm
2596f8b787cea221c80a85fd0854f766
2006.0/i586/mozilla-firefox-1.5.0.7-0.1.20060mdk.i586.rpm
c912e48bd5138b8f42b24b3c34653a19
2006.0/i586/mozilla-firefox-ar-1.5.0.7-0.1.20060mdk.i586.rpm
1a82466395715237df552070e51f6525
2006.0/i586/mozilla-firefox-bg-1.5.0.7-0.1.20060mdk.i586.rpm
514de0cacb2462a8a6a26206ac18b617
2006.0/i586/mozilla-firefox-br-1.5.0.7-0.1.20060mdk.i586.rpm
70415104d0814a6e94c1997c0c464957
2006.0/i586/mozilla-firefox-ca-1.5.0.7-0.1.20060mdk.i586.rpm
c2b5a360abd1a8a3e78dd8e9df072b4c
2006.0/i586/mozilla-firefox-cs-1.5.0.7-0.1.20060mdk.i586.rpm
f8dd2e9e5a5e374782d9154b09ca7b7d
2006.0/i586/mozilla-firefox-da-1.5.0.7-0.1.20060mdk.i586.rpm
a20a2bee8f26440b13294ef6247f66ec
2006.0/i586/mozilla-firefox-de-1.5.0.7-0.1.20060mdk.i586.rpm
c60d356eddf74e8799b239a925b35953
2006.0/i586/mozilla-firefox-devel-1.5.0.7-0.1.20060mdk.i586.rpm
5b4fbc76811530cfc20ef319daf2f577
2006.0/i586/mozilla-firefox-el-1.5.0.7-0.1.20060mdk.i586.rpm
fdc7591dc15dce7e373f4e167fb2c769
2006.0/i586/mozilla-firefox-es-1.5.0.7-0.1.20060mdk.i586.rpm
00a17b297ea7b7ee31a3fca5d3109ffc
2006.0/i586/mozilla-firefox-es_AR-1.5.0.7-0.1.20060mdk.i586.rpm
2bee9151bc0e40bf1ff22a9224643dcb
2006.0/i586/mozilla-firefox-eu-1.5.0.7-0.1.20060mdk.i586.rpm
03285b22a86c82b8558467befb5fa04b
2006.0/i586/mozilla-firefox-fi-1.5.0.7-0.1.20060mdk.i586.rpm
f9dbe9c8d7b907e6c1a80f0bce2d9323
2006.0/i586/mozilla-firefox-fr-1.5.0.7-0.1.20060mdk.i586.rpm
4e13ea6856a71514c569581e06515ae8
2006.0/i586/mozilla-firefox-fy-1.5.0.7-0.1.20060mdk.i586.rpm
81b56a020127b1e9c41facb963e670be
2006.0/i586/mozilla-firefox-ga-1.5.0.7-0.1.20060mdk.i586.rpm
3a14f0cee1271d5f4cfedc8967a2be45
2006.0/i586/mozilla-firefox-he-1.5.0.7-0.1.20060mdk.i586.rpm
9612ac69d69114d1da1dc1bfa6530d9b
2006.0/i586/mozilla-firefox-hu-1.5.0.7-0.1.20060mdk.i586.rpm
9a47da16333b9c1d839e19420ab5c3a5
2006.0/i586/mozilla-firefox-it-1.5.0.7-0.1.20060mdk.i586.rpm
ea5b214a43077114d8adaf184ba6ce61
2006.0/i586/mozilla-firefox-ja-1.5.0.7-0.1.20060mdk.i586.rpm
ebf899b39e850438dd4cfb1bbab9ba8d
2006.0/i586/mozilla-firefox-ko-1.5.0.7-0.1.20060mdk.i586.rpm
18522be12bdda788de662d07d5a07e08
2006.0/i586/mozilla-firefox-lt-1.5.0.7-0.1.20060mdk.i586.rpm
19a62453c05c0443aa2999a177d50dac
2006.0/i586/mozilla-firefox-mk-1.5.0.7-0.1.20060mdk.i586.rpm
352aa6197b0b79025f5a71a3135d95c9
2006.0/i586/mozilla-firefox-nb-1.5.0.7-0.1.20060mdk.i586.rpm
64b460d997ff70bf0ff50400c20a98e1
2006.0/i586/mozilla-firefox-nl-1.5.0.7-0.1.20060mdk.i586.rpm
1f67f28a68d57baa96523ef05ccd1bbe
2006.0/i586/mozilla-firefox-pa_IN-1.5.0.7-0.1.20060mdk.i586.rpm
f5b2681e10e6eb68e4fb9041262b65c5
2006.0/i586/mozilla-firefox-pl-1.5.0.7-0.1.20060mdk.i586.rpm
8d47794342c430b50dc04f7d4c65cf9d
2006.0/i586/mozilla-firefox-pt-1.5.0.7-0.1.20060mdk.i586.rpm
d975c5d5ec3c8fed8846f02105ba4795
2006.0/i586/mozilla-firefox-pt_BR-1.5.0.7-0.1.20060mdk.i586.rpm
563d01331a992ec6ded54d5118bc10ad
2006.0/i586/mozilla-firefox-ro-1.5.0.7-0.1.20060mdk.i586.rpm
4da569e782da6c5b98eab4862c335600
2006.0/i586/mozilla-firefox-ru-1.5.0.7-0.1.20060mdk.i586.rpm
4a77a4d9b22704184694a1a0580440f5
2006.0/i586/mozilla-firefox-sk-1.5.0.7-0.1.20060mdk.i586.rpm
0a153e8351a1ffdfadf067cdf9b2ee06
2006.0/i586/mozilla-firefox-sl-1.5.0.7-0.1.20060mdk.i586.rpm
e7ed42daf0c68890a34422d8f5b7dcf6
2006.0/i586/mozilla-firefox-sv-1.5.0.7-0.1.20060mdk.i586.rpm
542ce6ba9713683b8a741ab921cd3e45
2006.0/i586/mozilla-firefox-tr-1.5.0.7-0.1.20060mdk.i586.rpm
55c8c83ad72d6289bf1d45ea517b74ba
2006.0/i586/mozilla-firefox-uk-1.5.0.7-0.1.20060mdk.i586.rpm
591beaf9e8abf8911f023fb147efe765
2006.0/i586/mozilla-firefox-zh_CN-1.5.0.7-0.1.20060mdk.i586.rpm
23b9d2502d7cb24aeea82f358a428ec2
2006.0/i586/mozilla-firefox-zh_TW-1.5.0.7-0.1.20060mdk.i586.rpm
be8acdc18fe55ea8a9d0afc553bf21d3
2006.0/i586/yelp-2.10.0-6.2.20060mdk.i586.rpm
8dd982b67f6a2663b557730db744f74e
2006.0/SRPMS/devhelp-0.10-7.2.20060mdk.src.rpm
bb825c0cbdca42497eb6d486ca2d2d98
2006.0/SRPMS/epiphany-1.8.5-4.2.20060mdk.src.rpm
b3bbcb7f0e3dfa05ca9344f2710c3a94
2006.0/SRPMS/epiphany-extensions-1.8.2-3.2.20060mdk.src.rpm
7d238bc6883ebbd3e1a284ec06d972df
2006.0/SRPMS/galeon-2.0.1-1.2.20060mdk.src.rpm
77efc529087ba7362d54559385d5cc2d
2006.0/SRPMS/mozilla-firefox-1.5.0.7-0.1.20060mdk.src.rpm
1143a2a6ab3f937660bf4d11dfb68313
2006.0/SRPMS/mozilla-firefox-l10n-1.5.0.7-0.1.20060mdk.src.rpm
8b9dd1db87f3824c088f4e1b58eb8224
2006.0/SRPMS/yelp-2.10.0-6.2.20060mdk.src.rpm

Mandriva Linux 2006/X86_64

8f79a25451b9f41d48df89f996869cc7
2006.0/x86_64/devhelp-0.10-7.2.20060mdk.x86_64.rpm
a9b851ddb7a77ee0f6d73c9a475658e0
2006.0/x86_64/epiphany-1.8.5-4.2.20060mdk.x86_64.rpm
606bb2a3ece209a7c260fd81d776c123
2006.0/x86_64/epiphany-devel-1.8.5-4.2.20060mdk.x86_64.rpm
bb99bf7ed2e5608849cb9b0bcac49041
2006.0/x86_64/epiphany-extensions-1.8.2-3.2.20060mdk.x86_64.rpm
6caf5e05026177525d0d04225e5dcc4a
2006.0/x86_64/galeon-2.0.1-1.2.20060mdk.x86_64.rpm
2ef32f51f707beff08db88d61aab842d
2006.0/x86_64/lib64devhelp-1_0-0.10-7.2.20060mdk.x86_64.rpm
50b6716aa33e6065ce0ba0b107fb3a8c
2006.0/x86_64/lib64devhelp-1_0-devel-0.10-7.2.20060mdk.x86_64.rpm
0b3997e3f646af18f684fdce56194ae3
2006.0/x86_64/lib64nspr4-1.5.0.7-0.1.20060mdk.x86_64.rpm
75e63b4f3785b8c7fa4924d7f30be921
2006.0/x86_64/lib64nspr4-devel-1.5.0.7-0.1.20060mdk.x86_64.rpm
cda6b659c2777c44fdde0ac3ab1fb11b
2006.0/x86_64/lib64nspr4-static-devel-1.5.0.7-0.1.20060mdk.x86_64.rpm
4f3e6424fa71a629be1b81415fe2b875
2006.0/x86_64/lib64nss3-1.5.0.7-0.1.20060mdk.x86_64.rpm
7bd353454999969148524636267b68c5
2006.0/x86_64/lib64nss3-devel-1.5.0.7-0.1.20060mdk.x86_64.rpm
fe0707524f8f3b4e1dcfe80c8bec0190
2006.0/x86_64/libnspr4-1.5.0.7-0.1.20060mdk.i586.rpm
770e8d6c5643c78f486ae2c115f7c740
2006.0/x86_64/libnspr4-devel-1.5.0.7-0.1.20060mdk.i586.rpm
fafbff86e6f1d44b7d1ad3e5f1f24860
2006.0/x86_64/libnss3-1.5.0.7-0.1.20060mdk.i586.rpm
41c8df68fb4c2d8d37440d1dea73f8c6
2006.0/x86_64/libnss3-devel-1.5.0.7-0.1.20060mdk.i586.rpm
561212c426f35a3e2393ad3acbf11bda
2006.0/x86_64/mozilla-firefox-1.5.0.7-0.1.20060mdk.x86_64.rpm
a4a76ca919cec68bef5ec0521e4185b2
2006.0/x86_64/mozilla-firefox-ar-1.5.0.7-0.1.20060mdk.x86_64.rpm
e23f698f02d78a8d8b2ac056e91f106a
2006.0/x86_64/mozilla-firefox-bg-1.5.0.7-0.1.20060mdk.x86_64.rpm
1e815c45fb57ee56bd4d4258a8cda5ad
2006.0/x86_64/mozilla-firefox-br-1.5.0.7-0.1.20060mdk.x86_64.rpm
1c348254b80cec87c2b804825cdd8a5d
2006.0/x86_64/mozilla-firefox-ca-1.5.0.7-0.1.20060mdk.x86_64.rpm
6eac0be09030f9ed629107600bcbf88f
2006.0/x86_64/mozilla-firefox-cs-1.5.0.7-0.1.20060mdk.x86_64.rpm
a06b4569f5392501df97fb209315782f
2006.0/x86_64/mozilla-firefox-da-1.5.0.7-0.1.20060mdk.x86_64.rpm
98aac82b44a66047d884b95f251cd6c5
2006.0/x86_64/mozilla-firefox-de-1.5.0.7-0.1.20060mdk.x86_64.rpm
9479078391f288562b612afff9cb994e
2006.0/x86_64/mozilla-firefox-devel-1.5.0.7-0.1.20060mdk.x86_64.rpm
247dce39896e7230ffda5ca8bc58d736
2006.0/x86_64/mozilla-firefox-el-1.5.0.7-0.1.20060mdk.x86_64.rpm
a86cb00b8b07cd45a1274ddc318de2bd
2006.0/x86_64/mozilla-firefox-es-1.5.0.7-0.1.20060mdk.x86_64.rpm
8ba8f4e4d9fcfef9f3cc4ac71b15c5df
2006.0/x86_64/mozilla-firefox-es_AR-1.5.0.7-0.1.20060mdk.x86_64.rpm
4c477d0ef8c843b9416185508c9181a1
2006.0/x86_64/mozilla-firefox-eu-1.5.0.7-0.1.20060mdk.x86_64.rpm
6e9c4c9c6ba8cfefd32e4d135943824d
2006.0/x86_64/mozilla-firefox-fi-1.5.0.7-0.1.20060mdk.x86_64.rpm
b8046ef3da338188287fa9a8ebfb9515
2006.0/x86_64/mozilla-firefox-fr-1.5.0.7-0.1.20060mdk.x86_64.rpm
1609e86fa50ef7c5c3ef827bf47090e8
2006.0/x86_64/mozilla-firefox-fy-1.5.0.7-0.1.20060mdk.x86_64.rpm
5cdf122cafadd7f2125d42246402e29d
2006.0/x86_64/mozilla-firefox-ga-1.5.0.7-0.1.20060mdk.x86_64.rpm
75f82717c62d51d00ba25abcdf3e26a5
2006.0/x86_64/mozilla-firefox-he-1.5.0.7-0.1.20060mdk.x86_64.rpm
75b03be94bdea20dbbf361a3a295e4c9
2006.0/x86_64/mozilla-firefox-hu-1.5.0.7-0.1.20060mdk.x86_64.rpm
672f36e40f7c5463b5e771bcaeae31af
2006.0/x86_64/mozilla-firefox-it-1.5.0.7-0.1.20060mdk.x86_64.rpm
8cf3e2082d406f71c4c7d3f638792e1e
2006.0/x86_64/mozilla-firefox-ja-1.5.0.7-0.1.20060mdk.x86_64.rpm
4f0f77a0b9fd79a671857fd330933289
2006.0/x86_64/mozilla-firefox-ko-1.5.0.7-0.1.20060mdk.x86_64.rpm
b5c00962987efb764ea77e76c9734c79
2006.0/x86_64/mozilla-firefox-lt-1.5.0.7-0.1.20060mdk.x86_64.rpm
f788aefcdac5b098d8853a3ef4fe146c
2006.0/x86_64/mozilla-firefox-mk-1.5.0.7-0.1.20060mdk.x86_64.rpm
4afff3966656a65b55290d08d446d864
2006.0/x86_64/mozilla-firefox-nb-1.5.0.7-0.1.20060mdk.x86_64.rpm
e63e4db3037a915ac24dca78e5ae8617
2006.0/x86_64/mozilla-firefox-nl-1.5.0.7-0.1.20060mdk.x86_64.rpm
7e443e15233a3db5b76ae7c299d1e7d9
2006.0/x86_64/mozilla-firefox-pa_IN-1.5.0.7-0.1.20060mdk.x86_64.rpm
75ca84a45213c2d33d66b68c649dd875
2006.0/x86_64/mozilla-firefox-pl-1.5.0.7-0.1.20060mdk.x86_64.rpm
7a8cd126f5f5c63d45efe79a1e78e94d
2006.0/x86_64/mozilla-firefox-pt-1.5.0.7-0.1.20060mdk.x86_64.rpm
342155314a7801a1637d807e8ae8754d
2006.0/x86_64/mozilla-firefox-pt_BR-1.5.0.7-0.1.20060mdk.x86_64.rpm
359e5cb75905f2c08b49ecb1eccdf335
2006.0/x86_64/mozilla-firefox-ro-1.5.0.7-0.1.20060mdk.x86_64.rpm
fa480b18d46eaed805f8fe0c92f6a9fe
2006.0/x86_64/mozilla-firefox-ru-1.5.0.7-0.1.20060mdk.x86_64.rpm
3233bb351b6c89deb25a6722df088e9a
2006.0/x86_64/mozilla-firefox-sk-1.5.0.7-0.1.20060mdk.x86_64.rpm
f1347555bb50e32c58ac3edba31f3d1a
2006.0/x86_64/mozilla-firefox-sl-1.5.0.7-0.1.20060mdk.x86_64.rpm
c20fd1c8861e74829879a63075fdf2f4
2006.0/x86_64/mozilla-firefox-sv-1.5.0.7-0.1.20060mdk.x86_64.rpm
8c73daea2686e503d3367d112c4c691e
2006.0/x86_64/mozilla-firefox-tr-1.5.0.7-0.1.20060mdk.x86_64.rpm
59d920837831e1a165ce19447066b4e5
2006.0/x86_64/mozilla-firefox-uk-1.5.0.7-0.1.20060mdk.x86_64.rpm
869bea0fbfc6b2c65ab525d80aed03b9
2006.0/x86_64/mozilla-firefox-zh_CN-1.5.0.7-0.1.20060mdk.x86_64.rpm
1b867a3b0b7d8efd86377d0f0dcb67c3
2006.0/x86_64/mozilla-firefox-zh_TW-1.5.0.7-0.1.20060mdk.x86_64.rpm
12ab7912491456d673058667c8c0dc3a
2006.0/x86_64/yelp-2.10.0-6.2.20060mdk.x86_64.rpm
8dd982b67f6a2663b557730db744f74e
2006.0/SRPMS/devhelp-0.10-7.2.20060mdk.src.rpm
bb825c0cbdca42497eb6d486ca2d2d98
2006.0/SRPMS/epiphany-1.8.5-4.2.20060mdk.src.rpm
b3bbcb7f0e3dfa05ca9344f2710c3a94
2006.0/SRPMS/epiphany-extensions-1.8.2-3.2.20060mdk.src.rpm
7d238bc6883ebbd3e1a284ec06d972df
2006.0/SRPMS/galeon-2.0.1-1.2.20060mdk.src.rpm
77efc529087ba7362d54559385d5cc2d
2006.0/SRPMS/mozilla-firefox-1.5.0.7-0.1.20060mdk.src.rpm
1143a2a6ab3f937660bf4d11dfb68313
2006.0/SRPMS/mozilla-firefox-l10n-1.5.0.7-0.1.20060mdk.src.rpm
8b9dd1db87f3824c088f4e1b58eb8224
2006.0/SRPMS/yelp-2.10.0-6.2.20060mdk.src.rpm

ORIGINAL ADVISORY:
http://www.mandriva.com/security/advisories?name=MDKSA-2006:168

OTHER REFERENCES:
SA21906:
http://secunia.com/advisories/21906/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------