The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2006:0610 advisory.

    Mozilla Firefox is an open source Web browser.

    The Mozilla Foundation has discontinued support for the Mozilla Firefox     1.0 branch. This update deprecates the Mozilla Firefox 1.0 branch in     Red Hat Enterprise Linux 4 in favor of the supported Mozilla Firefox     1.5 branch.

    This update also resolves a number of outstanding Firefox security issues:

    Several flaws were found in the way Firefox processed certain javascript     actions. A malicious web page could execute arbitrary javascript     instructions with the permissions of chrome, allowing the page to steal     sensitive information or install browser malware. (CVE-2006-2776,     CVE-2006-2784, CVE-2006-2785, CVE-2006-2787, CVE-2006-3807, CVE-2006-3809,     CVE-2006-3812)

    Several denial of service flaws were found in the way Firefox processed     certain web content. A malicious web page could crash the browser or     possibly execute arbitrary code as the user running Firefox.
    (CVE-2006-2779, CVE-2006-2780, CVE-2006-3801, CVE-2006-3677, CVE-2006-3113,     CVE-2006-3803, CVE-2006-3805, CVE-2006-3806, CVE-2006-3811)

    A cross-site scripting flaw was found in the way Firefox processed     Unicode Byte-Order-Mark (BOM) markers in UTF-8 web pages. A malicious web     page could execute a script within the browser that a web input sanitizer     could miss due to a malformed script tag. (CVE-2006-2783)

    Several flaws were found in the way Firefox processed certain javascript     actions. A malicious web page could conduct a cross-site scripting attack     or steal sensitive information (such as cookies owned by other domains).
    (CVE-2006-3802, CVE-2006-3810)

    A form file upload flaw was found in the way Firefox handled javascript     input object mutation. A malicious web page could upload an arbitrary local     file at form submission time without user interaction. (CVE-2006-2782)

    A denial of service flaw was found in the way Firefox called the     crypto.signText() javascript function. A malicious web page could crash the     browser if the victim had a client certificate loaded. (CVE-2006-2778)

    Two HTTP response smuggling flaws were found in the way Firefox processed     certain invalid HTTP response headers. A malicious web site could return     specially crafted HTTP response headers which may bypass HTTP proxy     restrictions. (CVE-2006-2786)

    A flaw was found in the way Firefox processed Proxy AutoConfig scripts. A     malicious Proxy AutoConfig server could execute arbitrary javascript     instructions with the permissions of chrome, allowing the page to steal     sensitive information or install browser malware. (CVE-2006-3808)

    A double free flaw was found in the way the nsIX509::getRawDER method was     called. If a victim visited a carefully crafted web page, it was possible     to execute arbitrary code as the user running Firefox. (CVE-2006-2788)

    Users of Firefox are advised to upgrade to this update, which contains     Firefox version 1.5.0.5 that corrects these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 4 : firefox (RHSA-2006:0610)

medium Nessus Plugin ID 22121

Version 1.31