Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2006:146)

critical Nessus Plugin ID 23894

Synopsis

The remote Mandrake Linux host is missing one or more security updates.

Description

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program.

Corporate 3 had contained the Mozilla suite however, due to the support cycle for Mozilla, it was felt that upgrading Mozilla to Firefox and Thunderbird would allow for better future support for Corporate 3 users. To that end, the latest Thunderbird is being provided for Corporate 3 users which fix all known vulnerabilities up to version 1.5.0.5, as well as providing new and enhanced features.

Corporate users who were using Mozilla for mail may need to explicitly install the new mozilla-thunderbird packages.

For 2006 users, no explicit installs are necessary.

The following CVE names have been corrected with this update:
CVE-2006-2775, CVE-2006-2776, CVE-2006-2778, CVE-2006-2779, CVE-2006-2780, CVE-2006-2781, CVE-2006-2783, CVE-2006-2787, CVE-2006-3803, CVE-2006-3804, CVE-2006-3806, CVE-2006-3807, CVE-2006-3113, CVE-2006-3802, CVE-2006-3805, CVE-2006-3809, CVE-2006-3810, CVE-2006-3811, CVE-2006-3812.

Solution

Update the affected packages.

See Also

https://www.mozilla.org/en-US/security/advisories/mfsa2006-31/

https://www.mozilla.org/en-US/security/advisories/mfsa2006-32/

https://www.mozilla.org/en-US/security/advisories/mfsa2006-33/

https://www.mozilla.org/en-US/security/advisories/mfsa2006-35/

https://www.mozilla.org/en-US/security/advisories/mfsa2006-40/

https://www.mozilla.org/en-US/security/advisories/mfsa2006-42/

http://www.mozilla.org/security/announce/2006/mfsa2006-46.html

http://www.mozilla.org/security/announce/2006/mfsa2006-47.html

http://www.mozilla.org/security/announce/2006/mfsa2006-48.html

http://www.mozilla.org/security/announce/2006/mfsa2006-49.html

http://www.mozilla.org/security/announce/2006/mfsa2006-50.html

http://www.mozilla.org/security/announce/2006/mfsa2006-51.html

http://www.mozilla.org/security/announce/2006/mfsa2006-53.html

http://www.mozilla.org/security/announce/2006/mfsa2006-54.html

http://www.mozilla.org/security/announce/2006/mfsa2006-55.html

http://www.mozilla.org/security/announce/2006/mfsa2006-56.html

Plugin Details

Severity: Critical

ID: 23894

File Name: mandrake_MDKSA-2006-146.nasl

Version: 1.19

Type: local

Published: 12/16/2006

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.0

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:mozilla-thunderbird, p-cpe:/a:mandriva:linux:mozilla-thunderbird-br, p-cpe:/a:mandriva:linux:mozilla-thunderbird-ca, p-cpe:/a:mandriva:linux:mozilla-thunderbird-cs, p-cpe:/a:mandriva:linux:mozilla-thunderbird-da, p-cpe:/a:mandriva:linux:mozilla-thunderbird-de, p-cpe:/a:mandriva:linux:mozilla-thunderbird-devel, p-cpe:/a:mandriva:linux:mozilla-thunderbird-el, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-ca, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-cs, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-de, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-es, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-fi, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-fr, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-hu, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-it, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-ja, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-nb, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-nl, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-pl, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-pt, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-pt_br, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-ru, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-zh, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail-zh_cn, p-cpe:/a:mandriva:linux:mozilla-thunderbird-es, p-cpe:/a:mandriva:linux:mozilla-thunderbird-fi, p-cpe:/a:mandriva:linux:mozilla-thunderbird-fr, p-cpe:/a:mandriva:linux:mozilla-thunderbird-he, p-cpe:/a:mandriva:linux:mozilla-thunderbird-hu, p-cpe:/a:mandriva:linux:mozilla-thunderbird-it, p-cpe:/a:mandriva:linux:mozilla-thunderbird-ja, p-cpe:/a:mandriva:linux:mozilla-thunderbird-ko, p-cpe:/a:mandriva:linux:mozilla-thunderbird-nb, p-cpe:/a:mandriva:linux:mozilla-thunderbird-nl, p-cpe:/a:mandriva:linux:mozilla-thunderbird-pl, p-cpe:/a:mandriva:linux:mozilla-thunderbird-pt_br, p-cpe:/a:mandriva:linux:mozilla-thunderbird-ru, p-cpe:/a:mandriva:linux:mozilla-thunderbird-sk, p-cpe:/a:mandriva:linux:mozilla-thunderbird-sl, p-cpe:/a:mandriva:linux:mozilla-thunderbird-sv, p-cpe:/a:mandriva:linux:mozilla-thunderbird-tr, p-cpe:/a:mandriva:linux:mozilla-thunderbird-zh_cn, p-cpe:/a:mandriva:linux:nsinstall, cpe:/o:mandriva:linux:2006

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Patch Publication Date: 8/21/2006

Reference Information

CVE: CVE-2006-2775, CVE-2006-2776, CVE-2006-2778, CVE-2006-2779, CVE-2006-2780, CVE-2006-2781, CVE-2006-2783, CVE-2006-2787, CVE-2006-3113, CVE-2006-3802, CVE-2006-3803, CVE-2006-3804, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3809, CVE-2006-3810, CVE-2006-3811, CVE-2006-3812, CVE-2007-1794

CWE: 119, 94

MDKSA: 2006:146