Scientific Linux Security Update : firefox on SL5.x, SL4.x, SL3.x i386/x86_64
High Nessus Plugin ID 60192
SynopsisThe remote Scientific Linux host is missing one or more security updates.
A flaw was found in the way Firefox handled certain FTP PASV commands.
A malicious FTP server could use this flaw to perform a rudimentary port-scan of machines behind a user's firewall. (CVE-2007-1562)
Several denial of service flaws were found in the way Firefox handled certain form and cookie data. A malicious website that is able to set arbitrary form and cookie data could prevent Firefox from functioning properly. (CVE-2007-1362, CVE-2007-2869)
A flaw was found in the way Firefox displayed certain web content. A malicious web page could generate content that would overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site.
SolutionUpdate the affected devhelp, firefox and / or yelp packages.